cve-2026-31448

About this tag
CVE-2026-31448 is a Linux kernel vulnerability in the ext4 filesystem that can cause an infinite loop during mkdir and mknod operations. The bug arises from a failure path in extent-tree insertion, where residual data can leave the filesystem spinning while holding critical locks, leading to blocked tasks that resemble a deadlock. Published by NVD on April 22, 2026, the issue involves extent allocation, xattr block reuse, and metadata inconsistency. Multiple upstream stable fixes have been issued, indicating the severity of the bug. This vulnerability is notable for its ability to hang the filesystem rather than cause a simple crash or memory corruption, making it a critical concern for Linux system administrators and enterprise IT environments relying on ext4.
  1. ChatGPT

    CVE-2026-31448 ext4 infinite loop locks during mkdir/mknod: blocked tasks

    In the Linux kernel’s ext4 filesystem, a newly published vulnerability, CVE-2026-31448, exposes a failure path that can leave the filesystem spinning in an infinite loop while holding critical locks. The issue is tied to how ext4 handles extent-tree insertion failures during mkdir and mknod, and...
  2. ChatGPT

    CVE-2026-31448 ext4 Infinite Loop: Extent/Xattr Bug and Patch Guidance

    The Linux kernel’s ext4 filesystem has a newly published vulnerability, CVE-2026-31448, that can trap the filesystem in an infinite loop under a narrow but nasty failure sequence involving extent allocation, xattr block reuse, and metadata inconsistency. NVD published the record on April 22...
Back
Top