CVE-2026-31514
EUVD-2026-2489822.04.2026, 14:16
In the Linux kernel, the following vulnerability has been resolved:
erofs: set fileio bio failed in short read case
For file-backed mount, IO requests are handled by vfs_iocb_iter_read().
However, it can be interrupted by SIGKILL, returning the number of
bytes actually copied. Unused folios in bio are unexpectedly marked
as uptodate.
vfs_read
filemap_read
filemap_get_pages
filemap_readahead
erofs_fileio_readahead
erofs_fileio_rq_submit
vfs_iocb_iter_read
filemap_read
filemap_get_pages <= detect signal
erofs_fileio_ki_complete <= set all folios uptodate
This patch addresses this by setting short read bio with an error
directly.EnginsightAffected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 6.12.75 ≤ 𝑥 < 6.12.80 |
| linux | linux_kernel | 6.18.14 ≤ 𝑥 < 6.18.21 |
| linux | linux_kernel | 6.19.4 ≤ 𝑥 < 6.19.11 |
𝑥
= Vulnerable software versions
Debian Releases
Vulnerability Media Exposure