PT-2026-90317 · Linux · Linux
CVE-2026-89601
·
Publicado
2026-09-11
·
Atualizado
2026-09-11
CVSS v3.1
8.8
Alta
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
In the Linux kernel, the following vulnerability has been resolved:
ext2: Fix lost inode updates for IS SYNC inodes
ext2 setsize() and ext2 xattr set2() had a construct like:
if (IS SYNC(inode)) {
sync inode metadata(inode, 1);
} else {
mark inode dirty(inode);
}which leads to lost inode updates for IS SYNC inodes because
sync inode metadata() does anything only if the inode is already dirty
and hence inode updates may be simply lost. Fix the problem by
unconditionally marking the inode dirty and then call
sync inode metadata().
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux