CVE-2026-31694: fuse: reject oversized dirents in page cache
fuse: reject oversized dirents in page cache
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Linux kernel (fuse: reject oversized dirents in page cache)to a version that resolves this vulnerability.Fixed in 4 KiB - Compensating control
Reject dirents that cannot fit in a single page before copying them into the FUSE page cache (i.e., add a size check so the dirent serialization fits within PAGE_SIZE).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-31694?
CVE-2026-31694 is classified as a medium severity vulnerability due to its potential impact on system stability and integrity.
How do I fix CVE-2026-31694?
To remediate CVE-2026-31694, update your Linux kernel to the latest version where the vulnerability has been addressed.
What does CVE-2026-31694 affect?
CVE-2026-31694 affects the Linux kernel, specifically handling oversized directory entries in the page cache.
Can CVE-2026-31694 be exploited remotely?
Yes, CVE-2026-31694 can potentially be exploited remotely by an attacker with access to the affected filesystem.
What versions of the Linux kernel are impacted by CVE-2026-31694?
CVE-2026-31694 can impact various versions of the Linux kernel that have not been patched for the vulnerability.