PT-2026-43759 · Linux · Linux Kernel
CVE-2026-45892
·
Published
2026-05-27
·
Updated
2026-08-25
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the ext4 file system where splitting an unwritten extent and converting it to initialized can leave a stale unwritten extent in the status tree. This occurs in the
ext4 split extent() function when the EXT4 EXT MAY ZEROOUT and EXT4 EXT DATA VALID2 flags are set. Specifically, if ext4 split extent at() fails to split an extent due to a temporary lack of space, it may zero out a portion of the data while leaving the entire extent as unwritten. Subsequent successful splitting and the operation of ext4 map create blocks() can then result in an inconsistent state between the on-disk extent and the extent status tree.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux Kernel