filesystem security

Kernel.org disclosed CVE-2026-45899 on May 27, 2026, for a Linux kernel ext4 bug in which a failed extent split can leave stale entries in the filesystem’s extent status tree. That sentence sounds narrow, and in one sense it is: this is not a flashy remote-code-execution headline or a consumer...

The newly published CVE-2026-31451 is a classic example of why kernel bug fixes matter even when the flaw is framed as a “proper error handling” change rather than a dramatic exploit primitive. In the Linux ext4 filesystem, an unchecked inline-data condition could trigger a BUG_ON in...