CVE Database›Document archive›CVE-2026-31451

CVE-2026-31451

kernel: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · April 22, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's ext4 filesystem. When processing inline data, if the data size exceeded the expected page size, it could lead to a kernel panic. This issue could be triggered by a local user with access to a specially crafted or corrupted ext4 filesystem, resulting in a system crash and a denial of service.

Statement

This Moderate flaw in the Linux kernel's ext4 filesystem can lead to a denial of service. A local attacker with privileges to mount or access a specially crafted or corrupted ext4 filesystem could trigger a kernel panic, resulting in system unavailability. The impact is confined to local users and necessitates filesystem corruption.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Avoid mounting untrusted or specially crafted ext4 filesystems. Restricting local user access to the system can also reduce the attack surface.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-1284 · Improper Validation of Specified Quantity in Input