CVE-2026-31451CWE-617

CVE-2026-31451

Medium · published April 22, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio

Replace BUG_ON() with proper error handling when inline data size

exceeds PAGE_SIZE. This prevents kernel panic and allows the system to

continue running while properly reporting the filesystem corruption.

The error is logged via ext4_error_inode(), the buffer head is released

to prevent memory leak, and -EFSCORRUPTED is returned to indicate

filesystem corruption.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00129 · 2.3th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-04-22T18:16Z
Affected products (9)
ProductVersionsFixed in
linux/linux_kernel≥ 3.8, < 6.6.1316.6.131
linux/linux_kernel≥ 6.7, < 6.12.806.12.80
linux/linux_kernel≥ 6.13, < 6.18.216.18.21
linux/linux_kernel≥ 6.19, < 6.19.116.19.11
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (9)
EPSS history
Timeline
  • 22 APR 13:53Z
    ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio
    cvelistv5