PT-2026-43852 · Linux+2 · Linux Kernel+2
CVE-2026-45985
·
Published
2026-05-27
·
Updated
2026-08-25
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
An issue exists in the ext4 file system when allocating blocks during within-EOF Direct I/O (DIO) and writeback with
dioread nolock enabled. When splitting a large unwritten extent, the ext4 map blocks() function calls ext4 split convert extents() with the EXT4 GET BLOCKS CONVERT flag set. If ext4 split extent at() fails to insert an extent due to a temporary lack of space (-ENOSPC), the system may zero out the first half of the extent but incorrectly mark the entire on-disk extent as written. This inconsistency between the on-disk extent and the extent status tree can expose stale data if the DIO operation fails to write data to the disk and the cached extent entry is removed.Technical details involve the following functions:
ext4 iomap alloc()ext4 map blocks()ext4 split convert extents()ext4 split extent()ext4 split extent at()
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linuxmint
Linux Kernel
Ubuntu