CVE-2026-31447

ext4: reject mount if bigalloc with s_first_data_block != 0

State: Published
Severity: 7.8 High
Published: Apr 22, 2026
Updated: Oct 19, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: reject mount if bigalloc with s_first_data_block != 0

bigalloc with s_first_data_block != 0 is not supported, reject mounting it.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	Linux

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
LinuxLinux	281b59959707dfae03ce038cdf231bf4904e170c to before 5ad6d994255e27a3254079dfb50ca861fc31f2d0Affected 281b59959707dfae03ce038cdf231bf4904e170c to before 3a926957cc95899ef88529710836edadc03c71a1Affected 281b59959707dfae03ce038cdf231bf4904e170c to before 7b58c110b4e1f028eb38eec9ed3555e9be81c8b0Affected 281b59959707dfae03ce038cdf231bf4904e170c to before b77de3fceafbb39f30e4ff5dc986f863d5456417Affected 281b59959707dfae03ce038cdf231bf4904e170c to before d787d3ae96648dc14a3b7ca8fde817177e82c1c7Affected 281b59959707dfae03ce038cdf231bf4904e170c to before ad1f6d608f33f59d21a3d025615d6786a6443998Affected 281b59959707dfae03ce038cdf231bf4904e170c to before 7d5b04290156c3fc316eecc86a4f9d201ab7d44aAffected 281b59959707dfae03ce038cdf231bf4904e170c to before 3822743dc20386d9897e999dbb990befa3a5b3f8Affected
LinuxLinux	3.2Affected before 3.2Not affected 5.10.253 through 5.10.Not affected 5.15.203 through 5.15.Not affected 6.1.168 through 6.1.Not affected 6.6.131 through 6.6.Not affected 6.12.80 through 6.12.Not affected 6.18.21 through 6.18.Not affected 6.19.11 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

281b59959707dfae03ce038cdf231bf4904e170c to before 5ad6d994255e27a3254079dfb50ca861fc31f2d0Affected
281b59959707dfae03ce038cdf231bf4904e170c to before 3a926957cc95899ef88529710836edadc03c71a1Affected
281b59959707dfae03ce038cdf231bf4904e170c to before 7b58c110b4e1f028eb38eec9ed3555e9be81c8b0Affected
281b59959707dfae03ce038cdf231bf4904e170c to before b77de3fceafbb39f30e4ff5dc986f863d5456417Affected
281b59959707dfae03ce038cdf231bf4904e170c to before d787d3ae96648dc14a3b7ca8fde817177e82c1c7Affected
281b59959707dfae03ce038cdf231bf4904e170c to before ad1f6d608f33f59d21a3d025615d6786a6443998Affected
281b59959707dfae03ce038cdf231bf4904e170c to before 7d5b04290156c3fc316eecc86a4f9d201ab7d44aAffected
281b59959707dfae03ce038cdf231bf4904e170c to before 3822743dc20386d9897e999dbb990befa3a5b3f8Affected

LinuxLinux

3.2Affected
before 3.2Not affected
5.10.253 through 5.10.*Not affected
5.15.203 through 5.15.*Not affected
6.1.168 through 6.1.*Not affected
6.6.131 through 6.6.*Not affected
6.12.80 through 6.12.*Not affected
6.18.21 through 6.18.*Not affected
6.19.11 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.