CVE-2026-74362ext2: fix ignored return value of generic_write_sync()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: ext2: fix ignored return value of generic_write_sync() Fix ext2_dio_write_iter() to propagate the error returned by generic_write_sync() instead of silently discarding it, which could cause write(2) to return success to userspace on O_SYNC/O_DSYNC files even when the sync failed. The correct pattern, already used in ext2_dax_write_iter() in the same file and in ext4, xfs, f2fs among others, is: if (ret > 0) ret = generic_write_sync(iocb, ret); Found by Linux Verification Center (linuxtesting.org) with SVACE. [JK: Reflect also filemap_write_and_wait() return value]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from fb5de4358e1aa4753dce73c4dc1aca73ff39cedd before 8990dbb7065b0b002b1e58b9091a5b61f5e94dbe; from fb5de4358e1aa4753dce73c4dc1aca73ff39cedd before 8d70b3973020e59845c0bdad90e0b9c2295fd493; from fb5de4358e1aa4753dce73c4dc1aca73ff39cedd before ffa974b2f50ad8b911b9066d7aed84ad0afabcdb; from fb5de4358e1aa4753dce73c4dc1aca73ff39cedd before b6bc07e49a5fbb335f56eb90cd63dec6584c77d3; from fb5de4358e1aa4753dce73c4dc1aca73ff39cedd before a4659be0bc7cb1856ffb15b67f903229ae8891ec | CNA record |
References
- https://git.kernel.org/stable/c/8990dbb7065b0b002b1e58b9091a5b61f5e94dbe
- https://git.kernel.org/stable/c/8d70b3973020e59845c0bdad90e0b9c2295fd493
- https://git.kernel.org/stable/c/ffa974b2f50ad8b911b9066d7aed84ad0afabcdb
- https://git.kernel.org/stable/c/b6bc07e49a5fbb335f56eb90cd63dec6584c77d3
- https://git.kernel.org/stable/c/a4659be0bc7cb1856ffb15b67f903229ae8891ec
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.