CVE-2026-89601

Summary

In the Linux kernel, the following vulnerability has been resolved:

ext2: Fix lost inode updates for IS_SYNC inodes

ext2_setsize() and ext2_xattr_set2() had a construct like:

if (IS_SYNC(inode)) {
	sync_inode_metadata(inode, 1);
} else {
	mark_inode_dirty(inode);
}

which leads to lost inode updates for IS_SYNC inodes because sync_inode_metadata() does anything only if the inode is already dirty and hence inode updates may be simply lost. Fix the problem by unconditionally marking the inode dirty and then call sync_inode_metadata().

Affected Software

Weaknesses

References

• https://git.kernel.org/stable/c/5efb3350230fef831167740e69e6db2861101186
• https://git.kernel.org/stable/c/356984d1a5c32e94810cbb6c8dc7d8ff2d4d919a

• ←Previous
• Next→