CVE-2026-31451
Medium
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio Replace BUG_ON() with proper error handling when inline data size exceeds PAGE_SIZE. This prevents kernel panic and allows the system to continue running while properly reporting the filesystem corruption. The error is logged via ext4_error_inode(), the buffer head is released to prevent memory leak, and -EFSCORRUPTED is returned to indicate filesystem corruption.
SeverityMedium
CVSS5.5
Exploit probability—
Product
Linux Kernel
PublishedApr 22, 2026
First seenApr 22, 2026
Weakness typeCWE-617CWE-617
How to fix
Update
- linux linux_kernel6.6.131, 6.12.80, 6.18.21, 6.19.11 or later
Patches
- git.kernel.org/stable/c/356227096eb66e41b23caf7045e6304877322edf
- git.kernel.org/stable/c/65c6c30ce6362c1c684568744ea510c921a756cd
- git.kernel.org/stable/c/823849a26af089ffc5dfdd2ae4b9d446b46a0cda
- git.kernel.org/stable/c/a7d600e04732a7d29b107c91fe3aec64cf6ce7f2
- git.kernel.org/stable/c/d4b3f370c3d8f7ce565d4a718572c9f7c12f77ed
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux linux_kernel | 3.8 ≤ v < 6.6.131, 6.7 ≤ v < 6.12.80, 6.13 ≤ v < 6.18.21, 6.19 ≤ v < 6.19.11, 7.0 | 6.6.131, 6.12.80, 6.18.21, 6.19.11 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.