In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and ext2_xattr_set2() had a construct like: if (IS_SYNC(inode)) { sync_inode_metadata(inode, 1); } else { mark_inode_dirty(inode); } which leads to lost inode updates for IS_SYNC inodes because sync_inode_metadata() does anything only if the inode is already dirty and hence inode updates may be simply lost. Fix the problem by unconditionally marking the inode dirty and *then* call sync_inode_metadata().
Fix
Nothing published yet: no patch, vendor advisory or mitigation reference on NVD, no vendor advisory in the News for this CVE, not in CISA's KEV, no fixed package version. BaselineWatch does not guess at one.
Change history 5
- StatusReceived → PublishedNVD modified 2026-10-21 12:47
- References+2 references (now 5)NVD modified 2026-10-21 13:20
- StatusPublished → ReceivedNVD modified 2026-10-21 13:20
- StatusReceived → PublishedNVD modified 2026-10-19 08:49
- First seenCVSS 8.8NVD modified 2026-10-15 11:17
Affected (CPE criteria) 0
NVD has not attached CPE configurations yet.
References 5
- https://git.kernel.org/stable/c/356984d1a5c32e94810cbb6c8dc7d8ff2d4d919a
- https://git.kernel.org/stable/c/5481766125041e71662f2e32ee0e91ad5f4d07f4
- https://git.kernel.org/stable/c/5efb3350230fef831167740e69e6db2861101186
- https://git.kernel.org/stable/c/b879565effd88fc119c2efea3f3868a9997ed9ba
- https://git.kernel.org/stable/c/e54de654423bee98d1ba50379b09daf97c7854a6