PT-2026-90317 · Linux · Linux

CVE-2026-89601

·

Publicado

2026-09-11

·

Atualizado

2026-09-11

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
In the Linux kernel, the following vulnerability has been resolved:
ext2: Fix lost inode updates for IS SYNC inodes
ext2 setsize() and ext2 xattr set2() had a construct like:
if (IS SYNC(inode)) {
	sync inode metadata(inode, 1);
} else {
	mark inode dirty(inode);
}
which leads to lost inode updates for IS SYNC inodes because sync inode metadata() does anything only if the inode is already dirty and hence inode updates may be simply lost. Fix the problem by unconditionally marking the inode dirty and then call sync inode metadata().

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2026-89601

Produtos afetados

Linux