CVE-2026-74307

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A circular lock dependency exists in the ext4 filesystem when using the EXT4 IOC MOVE EXT ioctl. The issue occurs because the validation to ensure the donor file belongs to the same superblock as the original file is performed too late, specifically within the ext4 move extents() function by mext check validity(), after lock two nondirectories() has already acquired inode locks. If the donor file is on a different filesystem, such as overlayfs, a deadlock cycle can form during a concurrent freeze operation involving sb writers and inode locks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.