AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-74362

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's ext2 filesystem, where the return value of the `generic_write_sync()` function is ignored in the `ext2_dio_write_iter()` method. This oversight can lead to a situation where a write operation appears successful to userspace, even if the underlying synchronization failed, potentially compromising data integrity. System administrators and developers managing Linux systems utilizing the ext2 filesystem should prioritize applying the fix to mitigate risks associated with data loss or corruption.

CVE
CVE-2026-74362
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ext2: fix ignored return value of generic_write_sync() Fix ext2_dio_write_iter() to propagate the error returned by generic_write_sync() instead of silently discarding it, which could cause write(2) to return success to userspace on O_SYNC/O_DSYNC files even when the sync failed. The correct pattern, already used in ext2_dax_write_iter() in the same file and in ext4, xfs, f2fs among others, is: if (ret > 0) ret = generic_write_sync(iocb, ret); Found by Linux Verification Center (linuxtesting.org) with SVACE. [JK: Reflect also filemap_write_and_wait() return value]