CVE-2026-31451

MediumCVSS 5.5/10Last modified Nov 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio

Replace BUG_ON() with proper error handling when inline data size exceeds PAGE_SIZE. This prevents kernel panic and allows the system to continue running while properly reporting the filesystem corruption.

The error is logged via ext4_error_inode(), the buffer head is released to prevent memory leak, and -EFSCORRUPTED is returned to indicate filesystem corruption.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

VendorProductVersions
LinuxLinux>= 46c7f254543dedcf134ad05091ed2b935a9a597d, < 3462a3f0716d27af51896dc8688bcf0628fb17ee; >= 46c7f254543dedcf134ad05091ed2b935a9a597d, < 636e8d85a36ab6c31aafd04ee66a69b18eebee7b; >= 46c7f254543dedcf134ad05091ed2b935a9a597d, < af25a6affeac4919e8d8c5cccc01a9d53478447e; >= 46c7f254543dedcf134ad05091ed2b935a9a597d, < 65c6c30ce6362c1c684568744ea510c921a756cd; >= 46c7f254543dedcf134ad05091ed2b935a9a597d, < d4b3f370c3d8f7ce565d4a718572c9f7c12f77ed; >= 46c7f254543dedcf134ad05091ed2b935a9a597d, < 823849a26af089ffc5dfdd2ae4b9d446b46a0cda; >= 46c7f254543dedcf134ad05091ed2b935a9a597d, < a7d600e04732a7d29b107c91fe3aec64cf6ce7f2; >= 46c7f254543dedcf134ad05091ed2b935a9a597d, < 356227096eb66e41b23caf7045e6304877322edf
LinuxLinux3.8
SiemensSIMATIC S7-1500 TM MFP - GNU/Linux subsystem< *

References

Timeline

Published
Apr 22, 2026
Last modified
Nov 11, 2026
NVD status
Modified

Related CVEs from 2026

CVE-2026-314527.8In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size CVE-2026-314537.8In the Linux kernel, the following vulnerability has been resolved: xfs: avoid dereferencing log items after push callbacks After xfsaild_CVE-2026-314547.8In the Linux kernel, the following vulnerability has been resolved: xfs: save ailp before dropping the AIL lock in push callbacks In xfs_iCVE-2026-314557.8In the Linux kernel, the following vulnerability has been resolved: xfs: stop reclaim before pushing AIL during unmount The unmount sequenCVE-2026-314564.7In the Linux kernel, the following vulnerability has been resolved: mm/pagewalk: fix race between concurrent split and refault The splittiCVE-2026-314575.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr in repeat_call_fn damon_sysfs_repeaCVE-2026-314585.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: check contexts->nr before accessing contexts_arr[0] MuCVE-2026-314595.5In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix param_ctx leak on damon_sysfs_new_test_ctx() failurCVE-2026-31465.5A vulnerability has been found in libvips up to 8.18.0. The impacted element is the function vips_foreign_load_matrix_header of the file libCVE-2026-314605.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: check if ext_caps is valid in BL setup LVDS connectorCVE-2026-314615.5In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix drm_edid leak in amdgpu_dm [WHAT] When a sink is CVE-2026-314625.5In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: prevent immediate PASID reuse case PASID resue could cause