CVE-2026-31451

ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio

State: Published
Severity: Not scored
Published: Apr 22, 2026
Updated: Oct 15, 2026
Reserved: Mar 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio

Replace BUG_ON() with proper error handling when inline data size exceeds PAGE_SIZE. This prevents kernel panic and allows the system to continue running while properly reporting the filesystem corruption.

The error is logged via ext4_error_inode(), the buffer head is released to prevent memory leak, and -EFSCORRUPTED is returned to indicate filesystem corruption.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	46c7f254543dedcf134ad05091ed2b935a9a597d to before 3462a3f0716d27af51896dc8688bcf0628fb17eeAffected 46c7f254543dedcf134ad05091ed2b935a9a597d to before 636e8d85a36ab6c31aafd04ee66a69b18eebee7bAffected 46c7f254543dedcf134ad05091ed2b935a9a597d to before af25a6affeac4919e8d8c5cccc01a9d53478447eAffected 46c7f254543dedcf134ad05091ed2b935a9a597d to before 65c6c30ce6362c1c684568744ea510c921a756cdAffected 46c7f254543dedcf134ad05091ed2b935a9a597d to before d4b3f370c3d8f7ce565d4a718572c9f7c12f77edAffected 46c7f254543dedcf134ad05091ed2b935a9a597d to before 823849a26af089ffc5dfdd2ae4b9d446b46a0cdaAffected 46c7f254543dedcf134ad05091ed2b935a9a597d to before a7d600e04732a7d29b107c91fe3aec64cf6ce7f2Affected 46c7f254543dedcf134ad05091ed2b935a9a597d to before 356227096eb66e41b23caf7045e6304877322edfAffected
LinuxLinux	3.8Affected before 3.8Not affected 5.10.260 through 5.10.Not affected 5.15.211 through 5.15.Not affected 6.1.177 through 6.1.Not affected 6.6.131 through 6.6.Not affected 6.12.80 through 6.12.Not affected 6.18.21 through 6.18.Not affected 6.19.11 through 6.19.*Not affected 7.0 and laterNot affected

Product

Versions

LinuxLinux

46c7f254543dedcf134ad05091ed2b935a9a597d to before 3462a3f0716d27af51896dc8688bcf0628fb17eeAffected
46c7f254543dedcf134ad05091ed2b935a9a597d to before 636e8d85a36ab6c31aafd04ee66a69b18eebee7bAffected
46c7f254543dedcf134ad05091ed2b935a9a597d to before af25a6affeac4919e8d8c5cccc01a9d53478447eAffected
46c7f254543dedcf134ad05091ed2b935a9a597d to before 65c6c30ce6362c1c684568744ea510c921a756cdAffected
46c7f254543dedcf134ad05091ed2b935a9a597d to before d4b3f370c3d8f7ce565d4a718572c9f7c12f77edAffected
46c7f254543dedcf134ad05091ed2b935a9a597d to before 823849a26af089ffc5dfdd2ae4b9d446b46a0cdaAffected
46c7f254543dedcf134ad05091ed2b935a9a597d to before a7d600e04732a7d29b107c91fe3aec64cf6ce7f2Affected
46c7f254543dedcf134ad05091ed2b935a9a597d to before 356227096eb66e41b23caf7045e6304877322edfAffected

LinuxLinux

3.8Affected
before 3.8Not affected
5.10.260 through 5.10.*Not affected
5.15.211 through 5.15.*Not affected
6.1.177 through 6.1.*Not affected
6.6.131 through 6.6.*Not affected
6.12.80 through 6.12.*Not affected
6.18.21 through 6.18.*Not affected
6.19.11 through 6.19.*Not affected
7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.