CVE-2026-74308ext4: fix kernel BUG in ext4_write_inline_data_end
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ext4: fix kernel BUG in ext4_write_inline_data_end When the data=journal mount option is used, the ext4_journalled_write_end() function incorrectly calls ext4_write_inline_data_end() without checking if the EXT4_STATE_MAY_INLINE_DATA flag is still set on the inode. If a previous attempt to convert the inline data to an extent failed (e.g. due to ENOSPC), the EXT4_STATE_MAY_INLINE_DATA flag is cleared, but the EXT4_INODE_INLINE_DATA flag remains set. In this scenario, the next call to ext4_write_begin() will not prepare the inline data xattr for writing, but ext4_journalled_write_end() will incorrectly attempt to write to it, triggering a BUG_ON(pos + len > EXT4_I(inode)->i_inline_size) in ext4_write_inline_data() since i_inline_size was not expanded. Fix this by ensuring that ext4_journalled_write_end() only calls ext4_write_inline_data_end() if the EXT4_STATE_MAY_INLINE_DATA flag is set, mirroring the behavior of ext4_write_end() and ext4_da_write_end().
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 3fdcfb668fd78ec92d9bc2daddf1d41e2a8a30bb before 260830a9a706f5d335398236fc788ce32f220de1; from 3fdcfb668fd78ec92d9bc2daddf1d41e2a8a30bb before 9808ae9fae996afa942bd963a39c9b1cdeebd0bd; from 3fdcfb668fd78ec92d9bc2daddf1d41e2a8a30bb before f00f5c0dd55319bc33b76f72c853bda0e0a32eda; 3fdcfb668fd78ec92d9bc2daddf1d41e2a8a30bb builds before 0ae42b51607240990614e0843f0d3529aaff62cc; from 3fdcfb668fd78ec92d9bc2daddf1d41e2a8a30bb before ad09aa45965d3fafaf9963bc78109b73c0f9ac8d | CNA record |
References
- https://git.kernel.org/stable/c/260830a9a706f5d335398236fc788ce32f220de1
- https://git.kernel.org/stable/c/9808ae9fae996afa942bd963a39c9b1cdeebd0bd
- https://git.kernel.org/stable/c/f00f5c0dd55319bc33b76f72c853bda0e0a32eda
- https://git.kernel.org/stable/c/0ae42b51607240990614e0843f0d3529aaff62cc
- https://git.kernel.org/stable/c/ad09aa45965d3fafaf9963bc78109b73c0f9ac8d
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.