{"id":"CVE-2026-31514","revision":"b47b1419666e4ff39a1068142b0e9e19","records":[{"revision":"b47b1419666e4ff39a1068142b0e9e19","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2026-31514","aliases":[],"title":"erofs: set fileio bio failed in short read case","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nerofs: set fileio bio failed in short read case\n\nFor file-backed mount, IO requests are handled by vfs_iocb_iter_read().\nHowever, it can be interrupted by SIGKILL, returning the number of\nbytes actually copied. Unused folios in bio are unexpectedly marked\nas uptodate.\n\n  vfs_read\n    filemap_read\n      filemap_get_pages\n        filemap_readahead\n          erofs_fileio_readahead\n            erofs_fileio_rq_submit\n              vfs_iocb_iter_read\n                filemap_read\n                  filemap_get_pages  <= detect signal\n              erofs_fileio_ki_complete  <= set all folios uptodate\n\nThis patch addresses this by setting short read bio with an error\ndirectly.","state":0,"publishedAt":"2026-04-22T13:54:31.531+00:00","modifiedAt":"2026-05-11T22:10:16.061+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/erofs/fileio.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"8d582d65d20bb4796db01b19e86909ad68cb337b\",\n                            \"lessThan\": \"d1ba7d6b3cd1757b108d7b6856c92ae661d6c323\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"e49abde0ffc382a967b24f326d1614ac3bb06a94\",\n                            \"lessThan\": \"5cf3972c8221abdb1b464a14ccf8103d840b9085\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"fe4039034dcdf584afbf763787909e28e92a4927\",\n                            \"lessThan\": \"5a5f23ef5431639db1ac3a0b274aef3a84cc413c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"bc804a8d7e865ef47fb7edcaf5e77d18bf444ebc\",\n                            \"lessThan\": \"eade54040384f54b7fb330e4b0975c5734850b3c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"fs/erofs/fileio.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.12.75\",\n                            \"lessThan\": \"6.12.80\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.18.14\",\n                            \"lessThan\": \"6.18.21\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"6.19.4\",\n                            \"lessThan\": \"6.19.11\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"semver\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/d1ba7d6b3cd1757b108d7b6856c92ae661d6c323","https://git.kernel.org/stable/c/5cf3972c8221abdb1b464a14ccf8103d840b9085","https://git.kernel.org/stable/c/5a5f23ef5431639db1ac3a0b274aef3a84cc413c","https://git.kernel.org/stable/c/eade54040384f54b7fb330e4b0975c5734850b3c"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-31514","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-31514","identifiers":["CVE-2026-31514"]},"retained":false,"historicalAffected":[]}],"coverage":[]}