CVEvulnerability
CVE-2026-74596
- Status
- Received
- Published
- 2026-08-22
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
fs,fsverity: remove check for fsverity being enabled in setattr_prepare()
The check that fs-verity is available in the kernel is not necessary
here. Filesystems could have fsverity files even without fs-verity
enabled. In that case, truncate on fsverity file will succeed, what this
check is trying to prevent.
References
- https://git.kernel.org/stable/c/2d2b2ed7bdcc6df4942292318c5455b5e94ba525 git.kernel.org
- https://git.kernel.org/stable/c/3f3b0898557a93122a7f941e6a89adef2bb29ce4 git.kernel.org
- https://git.kernel.org/stable/c/b4c0c41b952c21baed3f822eab508ebbd1d355d9 git.kernel.org
- https://git.kernel.org/stable/c/d2f96bcb89d36d488a10e3bcf819b98536968286 git.kernel.org
- https://git.kernel.org/stable/c/fd4ed50c134fd9f2334b8b29d117f3af5fe250e9 git.kernel.org