Back to CVE records
Not yet scoredPublished Sep 24, 2026

CVE-2026-93268ext4: skip extra isize expansion during mount to prevent deadlock

Updated under an hour ago ()

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

In the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4_try_to_expand_extra_isize() is called from __ext4_mark_inode_dirty() while holding an active jbd2 handle. During mount (!SB_ACTIVE), the expand path may move xattrs to external blocks and release ea_inodes via iput(). When !SB_ACTIVE, iput() calls write_inode_now() which acquires s_writepages_rwsem, creating a circular lock dependency: s_writepages_rwsem --> jbd2_handle --> xattr_sem --> s_writepages_rwsem This can be triggered via: ext4_process_orphan() -> ext4_truncate() -> ext4_mark_inode_dirty() -> ext4_try_to_expand_extra_isize() or: ext4_evict_inode() -> ext4_mark_inode_dirty() -> ext4_try_to_expand_extra_isize() Skip expansion when !SB_ACTIVE. This is a minor loss of functionality (extra isize won't grow for these inodes during mount), which e2fsck can resolve later if needed.

CVSS
Not yet scored
Weakness (CWE)
Not given
Known exploited
Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days)
Not loaded for this CVE
Assigned by
Linux
NVD analysis
Received
Record last updated
Oct 19, 2026
First seen by InfoSec Signals
Oct 9, 2026

Affected products

Affected products
Linux Linux
linux:linux (from the name)
from c8585c6fcaf2011de54c3592e80a634a2b9e1a7f before 41897f1bcf4ace5f1f28d0be784b6f4f0e929641; from c8585c6fcaf2011de54c3592e80a634a2b9e1a7f before 9c3469377b1d8caba6bec6ef3c460810bbfb02cc; from c8585c6fcaf2011de54c3592e80a634a2b9e1a7f before 1dd4882dbdc8bfdf2182fa388883c143fac0902a; from c8585c6fcaf2011de54c3592e80a634a2b9e1a7f before 7ba09330d9ea6e996228316719eae812d7e04983; from c8585c6fcaf2011de54c3592e80a634a2b9e1a7f before c5e6434cc55f30220b228be237bb666351f9f4dd; from c8585c6fcaf2011de54c3592e80a634a2b9e1a7f before 7ace189b9ea79cf78df9c32b940ce12735f9459a; from c8585c6fcaf2011de54c3592e80a634a2b9e1a7f before 2fb8ff81659a57c42bb7b49e8339a2be2a318ef8; from c8585c6fcaf2011de54c3592e80a634a2b9e1a7f before 7461c60b9c6a839b13ad4c3490681a0cf5aa0637
CNA record

References

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.

Your cookie choices
We use essential cookies to run this site, and, only with your consent, an advertising cookie from Google to measure whether our ads lead to sign-ups and subscriptions. See our for details.