CVE-2026-74358

Received Received - Intake

ext4 Fast Commit State Handling Race Condition

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of i_flags, and ext4_test_inode_state() applies the corresponding +32 offset. The fast-commit wait and wake paths open-coded the wait key with the raw EXT4_STATE_* value. Add small helpers for the state wait word and bit, and use them for the FC_COMMITTING and FC_FLUSHING_DATA waits so the wait key follows the same mapping as the state helpers.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74358

EUVD

EUVD-2026-59505

Affected Vendors & Products

Vendor	Product	Version / Range
linux	kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves incorrect bit mapping for fast commit wait/wake operations on 64-bit systems. The issue occurs because ext4 dynamic inode states use the upper half of i_flags, and the wait key for fast-commit operations was not correctly offset by +32 like other state helpers. This could lead to improper synchronization during file system operations.

Detection Guidance

This vulnerability is specific to the Linux kernel's ext4 filesystem implementation and does not have a direct network detection method. To check if your system is affected, verify the kernel version and whether it includes the fix for this issue. Use commands like 'uname -r' to check the kernel version and examine the ext4 filesystem code for the described issue.

Impact Analysis

This vulnerability may cause file system corruption or data loss if the incorrect bit mapping leads to failed synchronization during fast commit operations. Users could experience system crashes, file system errors, or unexpected behavior when writing or committing data to ext4 file systems on 64-bit Linux systems.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a low-level ext4 filesystem issue in the Linux kernel related to fast commit wait/wake bit mapping on 64-bit systems. There is no indication of data exposure, integrity loss, or access control impact that would typically trigger compliance concerns.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this ext4 vulnerability. If updating is not immediately possible, consider disabling fast commits in ext4 by mounting filesystems with the 'nojournal' or 'data=ordered' options until the patch is applied.

Hi! I’m here to help you understand CVE-2026-74358. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70