High severity · published Apr 22, 2026
CVE-2026-31447
ext4: reject mount if bigalloc with s_first_data_block != 0
7.8
CVSS
0.1%
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved:
ext4: reject mount if bigalloc with s_first_data_block != 0
bigalloc with s_first_data_block != 0 is not supported, reject mounting
it.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 4% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KE
Kernel · Linux
3.2 before 5.10.253; 5.11 before 5.15.203; 5.16 before 6.1.168; 6.2 before 6.6.131; 6.7 before 6.12.80; 6.13 before 6.18.21; +6 more · source: NVD
LI
Linux · Linux
281b59959707dfae03ce038cdf231bf4904e170c before 5ad6d994255e27a3254079dfb50ca861fc31f2d0; 281b59959707dfae03ce038cdf231bf4904e170c before 3a926957cc95899ef88529710836edadc03c71a1; 281b59959707dfae03ce038cdf231bf4904e170c before 7b58c110b4e1f028eb38eec9ed3555e9be81c8b0; 281b59959707dfae03ce038cdf231bf4904e170c before b77de3fceafbb39f30e4ff5dc986f863d5456417; 281b59959707dfae03ce038cdf231bf4904e170c before d787d3ae96648dc14a3b7ca8fde817177e82c1c7; 281b59959707dfae03ce038cdf231bf4904e170c before ad1f6d608f33f59d21a3d025615d6786a6443998; +3 more · source: vendor
SS
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.6; V3.1.5; V3.1.7; V3.1.6; V3.1.5; V3.1.7 · source: CISA
SS
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP · Siemens
V3.1.6; V3.1.5; V3.1.7; V3.1.6; V3.1.5; V3.1.7 · source: CISA
SS
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP · Siemens
V3.1.6; V3.1.5; V3.1.7 · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-31447
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-31447
Patch
https://git.kernel.org/stable/c/3822743dc20386d9897e999dbb990befa3a5b3f8
Patch
https://git.kernel.org/stable/c/3a926957cc95899ef88529710836edadc03c71a1
Patch
https://git.kernel.org/stable/c/5ad6d994255e27a3254079dfb50ca861fc31f2d0
Patch
https://git.kernel.org/stable/c/7b58c110b4e1f028eb38eec9ed3555e9be81c8b0
Patch
https://git.kernel.org/stable/c/7d5b04290156c3fc316eecc86a4f9d201ab7d44a
Patch
https://git.kernel.org/stable/c/ad1f6d608f33f59d21a3d025615d6786a6443998
More from Kernel
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
8.8
CVE-2013-6282
Linux Kernel Improper Input Validation Vulnerability
8.4
CVE-2022-0185
Linux Kernel Heap-Based Buffer Overflow Vulnerability
8.4
CVE-2013-2094
Linux Kernel Privilege Escalation Vulnerability