CVE-2026-31451
kernel: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 22, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's ext4 filesystem. When processing inline data, if the data size exceeded the expected page size, it could lead to a kernel panic. This issue could be triggered by a local user with access to a specially crafted or corrupted ext4 filesystem, resulting in a system crash and a denial of service.
Statement
This Moderate flaw in the Linux kernel's ext4 filesystem can lead to a denial of service. A local attacker with privileges to mount or access a specially crafted or corrupted ext4 filesystem could trigger a kernel panic, resulting in system unavailability. The impact is confined to local users and necessitates filesystem corruption.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Avoid mounting untrusted or specially crafted ext4 filesystems. Restricting local user access to the system can also reduce the attack surface.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-1284 · Improper Validation of Specified Quantity in Input