CVE-2026-31452

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: ext4: convert inline data to extents when truncate exceeds inline size Add a check in ext4_setattr() to convert files from inline data storage to extent-based storage when truncate() grows the file size beyond the inline capacity. This prevents the filesystem from entering an inconsistent state where the inline data flag is set but the file size exceeds what can be stored inline. Without this fix, the following sequence causes a kernel BUG_ON(): 1. Mount filesystem with inode that has inline flag set and small size 2. trunc...

Affected product and versions

Product

Linux Linux, SIMATIC S7-1500 CPU 1518-4 PN/DP MFP, SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP

Affected versions

>= 67cf5b09a46f72e048501b84996f2f77bc42e947 < 110d7ef602659ce4d7947c5480f7ca2779696aaf, >= 67cf5b09a46f72e048501b84996f2f77bc42e947 < f53a5d9f32924bc2a810d2df243b7714da58b636, >= 67cf5b09a46f72e048501b84996f2f77bc42e947 < c047332be7195833a5c5126816c2502df8269fe4, >= 67cf5b09a46f72e048501b84996f2f77bc42e947 < 699bac4d4c951974d55b045c983d1de777215949, >= 67cf5b09a46f72e048501b84996f2f77bc42e947 < 7920dcc571cef3d8aa9ee109c136125d61d41669, >= 67cf5b09a46f72e048501b84996f2f77bc42e947 < 93cb2d103e5c707de0f7ad58a39b7f0fddc27aa6, >= 67cf5b09a46f72e048501b84996f2f77bc42e947 < 07c1a31af18290054da3d18221b8bf58983c5d3a, >= 67cf5b09a46f72e048501b84996f2f77bc42e947 < ed9356a30e59c7cc3198e7fc46cfedf3767b9b17, >= 3.8, >= V3.1.6, >= V3.1.5, >= 3.8 < 5.10.253, >= 5.11 < 5.15.203, >= 5.16 < 6.1.168, >= 6.2 < 6.6.131, >= 6.7 < 6.12.80, >= 6.13 < 6.18.21, >= 6.19 < 6.19.11, 7.0

Fixed versions

5.10.253, 5.15.203, 6.1.168, 6.6.131, 6.12.80, 6.18.21, 6.19.11

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-787