PT-2026-34356 · Linux · Linux Kernel

Published 2026-04-22 · Updated 2026-04-23 · CVE-2026-31451

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ext4 read inline folio() function where the use of BUG ON() when inline data size exceeds PAGE SIZE can lead to a kernel panic. The fix replaces this with proper error handling that logs the error via ext4 error inode(), releases the buffer head to prevent memory leaks, and returns -EFSCORRUPTED to report filesystem corruption, allowing the system to continue running.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Assertion Failure

Weakness Enumeration

CWE-617

Related Identifiers

CVE-2026-31451

ECHO-C6B1-A010-5611

Affected Products

Linux Kernel

References · 15

• https://git.kernel.org/stable/c/823849a26af089ffc5dfdd2ae4b9d446b46a0cda · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-31451 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-31451 · Vendor Advisory
• https://git.kernel.org/stable/c/356227096eb66e41b23caf7045e6304877322edf · Patch
• https://git.kernel.org/stable/c/a7d600e04732a7d29b107c91fe3aec64cf6ce7f2 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-31451 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-31451 · Security Note
• https://cve.org/CVERecord?id=CVE-2026-31451 · Security Note
• https://git.kernel.org/stable/c/d4b3f370c3d8f7ce565d4a718572c9f7c12f77ed · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-31451 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-31451 · Vendor Advisory
• https://git.kernel.org/stable/c/65c6c30ce6362c1c684568744ea510c921a756cd · Patch
• https://docs.bell-sw.com/security/cves/CVE-2026-31451 · Note
• https://git.kernel.org/linus/356227096eb66e41b23caf7045e6304877322edf · Note
• https://twitter.com/CVEnew/status/2046980039338516500 · Twitter Post