CVE-2026-31447

OVERVIEW CVE-2026-31447 is a Linux kernel vulnerability affecting the ext4 filesystem implementation. The issue involves improper validation during filesystem mounting when bigalloc (big cluster allocation) is combined with a non-zero s_first_data_block configuration, a combination that is not supported. The vulnerability requires rejection of such malformed mount attempts to prevent potential system instability. SEVERITY The vulnerability carries a low severity profile with a FAUCET Risk Score of 20.0/100 and an extremely low EPSS score of 0.000240. No CVSS vector data is available. Exploitation would require local access to the affected system and administrative privileges to mount a crafted ext4 filesystem image, making the attack complexity relatively high and limiting the exposure surface. EXPLOITATION STATUS There is no indication of active exploitation in the wild, as the vulnerability is not listed on the CISA Known Exploited Vulnerabilities catalog and remains inactive on public hot lists. No public exploit code has been reported, and community attention appears minimal. This represents a defensive patch to prevent a potential denial-of-service condition rather than an actively targeted security flaw.