You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
cve-2026-31448
About this tag
CVE-2026-31448 is a Linux kernel vulnerability in the ext4 filesystem that can cause an infinite loop during mkdir and mknod operations. The bug arises from a failure path in extent-tree insertion, where residual data can leave the filesystem spinning while holding critical locks, leading to blocked tasks that resemble a deadlock. Published by NVD on April 22, 2026, the issue involves extent allocation, xattr block reuse, and metadata inconsistency. Multiple upstream stable fixes have been issued, indicating the severity of the bug. This vulnerability is notable for its ability to hang the filesystem rather than cause a simple crash or memory corruption, making it a critical concern for Linux system administrators and enterprise IT environments relying on ext4.
In the Linux kernel’s ext4 filesystem, a newly published vulnerability, CVE-2026-31448, exposes a failure path that can leave the filesystem spinning in an infinite loop while holding critical locks. The issue is tied to how ext4 handles extent-tree insertion failures during mkdir and mknod, and...
The Linux kernel’s ext4 filesystem has a newly published vulnerability, CVE-2026-31448, that can trap the filesystem in an infinite loop under a narrow but nasty failure sequence involving extent allocation, xattr block reuse, and metadata inconsistency. NVD published the record on April 22...