PT-2026-34355 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-05-09 · CVE-2026-31450

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ext4 file system where the ext4 inode attach jinode() function publishes ei->jinode to concurrent users before jbd2 journal init jbd inode() is completed. This allows a reader to observe a non-NULL jinode while i vfs inode is still unset. Consequently, the fast commit flush path may pass this jinode to jbd2 wait inode data(), which dereferences i vfs inode->i mapping, potentially leading to a system crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-31450

ECHO-326E-7CA0-F099

OESA-2026-2233

OESA-2026-2234

Affected Products

Linux Kernel

References · 29

• https://git.kernel.org/stable/c/1aec30021edd410b986c156f195f3d23959a9d11 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31602 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-31450 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31590 · Security Note
• https://git.kernel.org/stable/c/e4325e84727e539c8597bd5b8491349f57f7fb17 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31570 · Security Note
• https://git.kernel.org/stable/c/4855a59e21789c79f003a9b5f4135c95a7495c6b · Patch
• https://git.kernel.org/stable/c/be54c0055407a73b60349c093c8ce621cb8fa232 · Patch
• https://git.kernel.org/stable/c/a070d5a872ffe0e0fe5c46eda6386140ded39adb · Patch
• https://cve.org/CVERecord?id=CVE-2026-31450 · Security Note
• https://ubuntu.com/security/CVE-2026-31450 · Vendor Advisory
• https://git.kernel.org/stable/c/33f486987af21531a7b18973d11795ede3da9ddd · Patch
• https://git.kernel.org/stable/c/2d2b648960147d078b000b9a7494017082024366 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-31680 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-31450 · Security Note