Skip to main content
← All vulnerabilities
CVE-2026-31451

ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 5.10.260, 5.15.211, 6.1.177, 6.6.131, 6.12.80, and 2 more
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Replace BUG_ON() with proper error handling when inline data size exceeds PAGE_SIZE. This prevents kernel panic and allows the system to continue running while properly reporting the filesystem corruption. The error is logged via ext4_error_inode(), the buffer head is released to prevent memory leak, and -EFSCORRUPTED is returned to indicate filesystem corruption.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 3462a3f0716d27af51896dc8688bcf0628fb17ee; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 636e8d85a36ab6c31aafd04ee66a69b18eebee7b; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in af25a6affeac4919e8d8c5cccc01a9d53478447e; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 65c6c30ce6362c1c684568744ea510c921a756cd; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in d4b3f370c3d8f7ce565d4a718572c9f7c12f77ed; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 823849a26af089ffc5dfdd2ae4b9d446b46a0cda; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in a7d600e04732a7d29b107c91fe3aec64cf6ce7f2; From 46c7f254543dedcf134ad05091ed2b935a9a597d · fixed in 356227096eb66e41b23caf7045e6304877322edf

  • Linux Linux

    3.8

  • KernelLinux

    From 3.8.0 · fixed in 5.10.260; From 5.11.0 · fixed in 5.15.211; From 5.16.0 · fixed in 6.1.177; From 6.2.0 · fixed in 6.6.131; From 6.7.0 · fixed in 6.12.80; From 6.13.0 · fixed in 6.18.21; From 6.19.0 · fixed in 6.19.11

References 8

git.kernel.org