CVE-2026-31514

Received Received - Intake

Improper Bio Handling in Linux EROFS Causes Data Integrity Risk

Publication date: 2026-04-22

Last updated on: 2026-04-28

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: erofs: set fileio bio failed in short read case For file-backed mount, IO requests are handled by vfs_iocb_iter_read(). However, it can be interrupted by SIGKILL, returning the number of bytes actually copied. Unused folios in bio are unexpectedly marked as uptodate. vfs_read filemap_read filemap_get_pages filemap_readahead erofs_fileio_readahead erofs_fileio_rq_submit vfs_iocb_iter_read filemap_read filemap_get_pages <= detect signal erofs_fileio_ki_complete <= set all folios uptodate This patch addresses this by setting short read bio with an error directly.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-04-22

Last Modified

2026-04-28

Generated

2026-07-06

AI Q&A

2026-04-22

EPSS Evaluated

2026-07-05

NVD

CVE-2026-31514

EUVD

EUVD-2026-24898

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.12.75 (inc) to 6.12.80 (exc)
linux	linux_kernel	From 6.18.14 (inc) to 6.18.21 (exc)
linux	linux_kernel	From 6.19.4 (inc) to 6.19.11 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability exists in the Linux kernel's erofs file system related to how IO requests are handled during file-backed mounts. Specifically, when a read operation is interrupted by a SIGKILL signal, the function vfs_iocb_iter_read() returns the number of bytes actually copied, but the unused memory pages (folios) in the bio structure are incorrectly marked as up-to-date. This can cause inconsistencies because the system believes data has been correctly read when it has not.

The issue arises in the sequence of function calls handling the read operation, where the signal interruption is detected but the subsequent marking of folios as up-to-date happens regardless, leading to potential data integrity problems. The patch fixes this by setting an error on the short read bio directly, preventing the incorrect marking.

Impact Analysis

This vulnerability can impact you by causing data integrity issues during file read operations on the erofs file system in the Linux kernel. Because unused folios are incorrectly marked as up-to-date after an interrupted read, applications or systems relying on this data might read stale or incomplete data without being aware of the error.

Such silent data corruption can lead to application errors, incorrect processing of data, or system instability, especially in environments where accurate file reads are critical.

Hi! I’m here to help you understand CVE-2026-31514. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70