CVEvulnerability
CVE-2026-89601
8.8 HIGH
Official page ↗
- Status
- Received
- Published
- 2026-09-11
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
ext2: Fix lost inode updates for IS_SYNC inodes
ext2_setsize() and ext2_xattr_set2() had a construct like:
if (IS_SYNC(inode)) {
sync_inode_metadata(inode, 1);
} else {
mark_inode_dirty(inode);
}
which leads to lost inode updates for IS_SYNC inodes because
sync_inode_metadata() does anything only if the inode is already dirty
and hence inode updates may be simply lost. Fix the problem by
unconditionally marking the inode dirty and *then* call
sync_inode_metadata().
References
- https://git.kernel.org/stable/c/356984d1a5c32e94810cbb6c8dc7d8ff2d4d919a git.kernel.org
- https://git.kernel.org/stable/c/5481766125041e71662f2e32ee0e91ad5f4d07f4 git.kernel.org
- https://git.kernel.org/stable/c/5efb3350230fef831167740e69e6db2861101186 git.kernel.org
- https://git.kernel.org/stable/c/b879565effd88fc119c2efea3f3868a9997ed9ba git.kernel.org
- https://git.kernel.org/stable/c/e54de654423bee98d1ba50379b09daf97c7854a6 git.kernel.org