CVE-2026-31463
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
22/04/2026
Last modified:
23/04/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
iomap: fix invalid folio access when i_blkbits differs from I/O granularity<br />
<br />
Commit aa35dd5cbc06 ("iomap: fix invalid folio access after<br />
folio_end_read()") partially addressed invalid folio access for folios<br />
without an ifs attached, but it did not handle the case where<br />
1 cur_folio = NULL;<br />
<br />
in iomap_read_folio_iter() will not invalidate ctx->cur_folio, and<br />
iomap_read_end() will still be called on the folio even though the IO<br />
helper owns it and will finish the read on it.<br />
<br />
Fix this by unconditionally invalidating ctx->cur_folio for the !ifs<br />
case.



