CVE-2026-31514

Source
https://cve.org/CVERecord?id=CVE-2026-31514
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31514.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-31514
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (5)
UBUNTU (1)
Related
Published
2026-04-22T13:54:31Z
Modified
2026-10-25T02:34:43Z
Summary
erofs: set fileio bio failed in short read case
Details

In the Linux kernel, the following vulnerability has been resolved:

erofs: set fileio bio failed in short read case

For file-backed mount, IO requests are handled by vfs_iocb_iter_read(). However, it can be interrupted by SIGKILL, returning the number of bytes actually copied. Unused folios in bio are unexpectedly marked as uptodate.

vfs_read filemap_read filemap_get_pages filemap_readahead erofs_fileio_readahead erofs_fileio_rq_submit vfs_iocb_iter_read filemap_read filemap_get_pages <= detect signal erofs_fileio_ki_complete <= set all folios uptodate

This patch addresses this by setting short read bio with an error directly.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/31xxx/CVE-2026-31514.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
ce63cb62d794c98c7631c2296fa845f2a8d0a4a1
Fixed
d1ba7d6b3cd1757b108d7b6856c92ae661d6c323
Fixed
5cf3972c8221abdb1b464a14ccf8103d840b9085
Fixed
5a5f23ef5431639db1ac3a0b274aef3a84cc413c
Fixed
eade54040384f54b7fb330e4b0975c5734850b3c

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31514.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.12.0
Fixed
6.12.80
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.21
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
6.19.11

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-31514.json"