CVE-2026-31449

Katalog CVE

CVSS 7.8 · High EPSS 0,20%

Kerentanan Out-of-bounds Read pada linux kernel. Skor CVSS 3.1 7.8 (High) menurut CNA.

Deskripsi (NVD)

In the Linux kernel, the following vulnerability has been resolved: ext4: validate p_idx bounds in ext4_ext_correct_indexes ext4_ext_correct_indexes() walks up the extent tree correcting index entries when the first extent in a leaf is modified. Before accessing path[k].p_idx->ei_block, there is no validation that p_idx falls within the valid range of index entries for that level. If the on-disk extent header contains a corrupted or crafted eh_entries value, p_idx can point past the end of the allocated buffer, causing a slab-out-of-bounds read. Fix this by validating path[k].p_idx against EXT_LAST_INDEX() at both access sites: before the while loop and inside it. Return -EFSCORRUPTED if the index pointer is out of range, consistent with how other bounds violations are handled in the ext4 extent tree code.

Rincian

Terbit di NVD

22 April 2026

Terakhir diubah

8 September 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber CNA
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-125: Out-of-bounds Read

EPSS (30 hari)

0,20% peluang dieksploitasi; lebih tinggi dari 8,7% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://git.kernel.org/stable/c/01bf1e0b997d82c0e353b51ed74ef99698043c33 patch
• https://git.kernel.org/stable/c/2acb5c12ebd860f30e4faf67e6cc8c44ddfe5fe8 patch
• https://git.kernel.org/stable/c/407c944f217c17d4343148011acafebc604d55e1 patch
• https://git.kernel.org/stable/c/93f2e975ed658ce09db4d4c2877ca2c06540df83 patch
• https://git.kernel.org/stable/c/10242e640b36b91ad03d25f3dc77854bbdff8358
• https://git.kernel.org/stable/c/39d6e2b67651614bac0dc6592fa9836321910067
• https://git.kernel.org/stable/c/4d08401aa13f1531216f1a7ae281ca4806e90a5c
• https://git.kernel.org/stable/c/c5839b34704c9c2f47f079451bdbb22de0da1ed1
• https://cert-portal.siemens.com/productcert/html/ssa-019113.html