Lucene search
+L

5272 matches found

OSV
OSV
added 2026/04/22 1:53 p.m.3 views

CVE-2026-31451 ext4: replace BUG_ON with proper error handling in ext4_read_inline_folio

In the Linux kernel, the following vulnerability has been resolved: ext4: replace BUGON with proper error handling in ext4readinlinefolio Replace BUGON with proper error handling when inline data size exceeds PAGESIZE. This prevents kernel panic and allows the system to continue running while...

5.5CVSS5.9AI score0.00123EPSS
SaveExploits0References11
Cvelist
Cvelist
added 2026/04/22 1:53 p.m.35 views

CVE-2026-31450 ext4: publish jinode after initialization

In the Linux kernel, the following vulnerability has been resolved: ext4: publish jinode after initialization ext4inodeattachjinode publishes ei-jinode to concurrent users. It used to set ei-jinode before jbd2journalinitjbdinode, allowing a reader to observe a non-NULL jinode with ivfsinode still...

8.8CVSS0.00533EPSS
SaveExploits0References8
CVE
CVE
added 2026/04/22 1:53 p.m.30 views

CVE-2026-31450

CVE-2026-31450 describes a race in ext4 where ei->jinode was published to concurrent readers before jbd2_journal_init_jbd_inode() completed, allowing a non-NULL jinode to be observed with i_vfs_inode still NULL. The mitigated issue could lead to a crash when a reader passes jinode to jbd2_wait...

8.8CVSS5.6AI score0.00533EPSS
SaveExploits0References10Affected Software1
OSV
OSV
added 2026/04/22 1:53 p.m.2 views

CVE-2026-31450 ext4: publish jinode after initialization

In the Linux kernel, the following vulnerability has been resolved: ext4: publish jinode after initialization ext4inodeattachjinode publishes ei-jinode to concurrent users. It used to set ei-jinode before jbd2journalinitjbdinode, allowing a reader to observe a non-NULL jinode with ivfsinode still...

8.8CVSS5.8AI score0.00533EPSS
SaveExploits0References13
CVE
CVE
added 2026/04/22 1:53 p.m.43 views

CVE-2026-31448

CVE-2026-31448 concerns the Linux kernel ext4 filesystem. The issue arises on mkdir/mknod when an extent insertion fails and ext4_ext_map_blocks() reclaims blocks without removing corresponding data from the extent tree, allowing the same physical block to be referenced by both directory and xatt...

9.4CVSS5.7AI score0.00443EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 1:53 p.m.6 views

CVE-2026-31448

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data On the mkdir/mknod path, when mapping logical blocks to physical blocks, if inserting a new extent into the extent tree fails in this example, because the file system disabled th...

5.7AI score0.00443EPSS
SaveExploits0References7Affected Software1
Cvelist
Cvelist
added 2026/04/22 1:53 p.m.36 views

CVE-2026-31448 ext4: avoid infinite loops caused by residual data

In the Linux kernel, the following vulnerability has been resolved: ext4: avoid infinite loops caused by residual data On the mkdir/mknod path, when mapping logical blocks to physical blocks, if inserting a new extent into the extent tree fails in this example, because the file system disabled th...

9.4CVSS0.00443EPSS
SaveExploits0References6
CVE
CVE
added 2026/04/22 1:53 p.m.37 views

CVE-2026-31449

The CVE-2026-31449 entry concerns the Linux kernel ext4 extent code. A vulnerability was fixed in ext4_ext_correct_indexes where path[k].p_idx could point outside the valid index range if the on-disk eh_entries were corrupted, causing a slab-out-of-bounds read. The fix validates path[k].p_idx aga...

7.8CVSS5.6AI score0.00135EPSS
SaveExploits0References8Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 1:53 p.m.5 views

CVE-2026-31449

In the Linux kernel, the following vulnerability has been resolved: ext4: validate pidx bounds in ext4extcorrectindexes ext4extcorrectindexes walks up the extent tree correcting index entries when the first extent in a leaf is modified. Before accessing pathk.pidx-eiblock, there is no validation...

7.8CVSS5.5AI score0.00135EPSS
SaveExploits0References6Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/22 1:53 p.m.7 views

CVE-2026-31447

In the Linux kernel, the following vulnerability has been resolved: ext4: reject mount if bigalloc with sfirstdatablock != 0 bigalloc with sfirstdatablock != 0 is not supported, reject mounting it...

5.6AI score0.00143EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2026/04/22 1:53 p.m.24 views

CVE-2026-31447

CVE-2026-31447 affects the Linux kernel ext4, where mounting a filesystem with bigalloc and s_first_data_block != 0 is rejected. The root cause is that this configuration is not supported, leading to a mount-time denial of access (DoS potential). Connected records show patches in Root: Debian 11/...

7.8CVSS5.6AI score0.00143EPSS
SaveExploits0References10Affected Software1
Cvelist
Cvelist
added 2026/04/22 1:53 p.m.38 views

CVE-2026-31446 ext4: fix use-after-free in update_super_work when racing with umount

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in updatesuperwork when racing with umount Commit b98535d09179 "ext4: fix bugon in startthishandle during umount filesystem" moved ext4unregistersysfs before flushing ssbupdwork to prevent new error work...

7.8CVSS0.00135EPSS
SaveExploits0References7
CVE
CVE
added 2026/04/22 1:53 p.m.32 views

CVE-2026-31446

CVE-2026-31446 is a Linux kernel/ext4 vulnerability describing a use-after-free in update_super_work during unmount races. The root cause: update_super_work calls ext4_notify_error_sysfs() -> sysfs_notify() after ext4_unregister_sysfs() frees the kobject, leading to a stale kernfs_node access....

7.8CVSS5.6AI score0.00135EPSS
SaveExploits0References9Affected Software1
OSV
OSV
added 2026/04/22 1:53 p.m.5 views

CVE-2026-31446 ext4: fix use-after-free in update_super_work when racing with umount

In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in updatesuperwork when racing with umount Commit b98535d09179 "ext4: fix bugon in startthishandle during umount filesystem" moved ext4unregistersysfs before flushing ssbupdwork to prevent new error work...

7.8CVSS6.2AI score0.00135EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.11 views

PT-2026-34352

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ext4 file system where the kernel fails to reject mounting when bigalloc is used in conjunction with s first data block not equal to 0, a configuration that is not...

7.8CVSS6.5AI score0.00143EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/04/22 12:0 a.m.11 views

Linux kernel 安全漏洞

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the ext4readInlinefolio function not properly handling inline data sizes exceeding PAGESIZE,...

5.5CVSS5.8AI score0.00123EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.12 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013530)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013530 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: silence the warning when evicting inode with dioreadnolock When evicting an inode with...

5.8AI score0.00214EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.7 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013839)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013839 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix use-after-free in ext4orphancleanup I caught a issue as follows:...

5.6AI score0.0022EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.7 views

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-013843)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-013843 advisory. In the Linux kernel, the following vulnerability has been resolved: ext4: fix bugon in estreesearch caused by bad boot loader inode We got a issue as fllows:...

5.7AI score0.00213EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.6 views

Linux Distros Unpatched Vulnerability : CVE-2026-31451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ext4: replace BUGON with proper error handling in ext4readinlinefolio Replace BUGON with proper error handling when inline data size exceeds PAGESIZE. This...

5.5CVSS6AI score0.00123EPSS
SaveExploits0References4
Rows per page
Query Builder