CVE-2026-74362

ext2: fix ignored return value of generic_write_sync()

N/A
Published: August 15, 2026 at 05:58 AM UTC
Updated: August 17, 2026 at 06:19 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: ext2: fix ignored return value of generic_write_sync() Fix ext2_dio_write_iter() to propagate the error returned by generic_write_sync() instead of silently discarding it, which could cause write(2) to return success to userspace on O_SYNC/O_DSYNC files even when the sync failed. The correct pattern, already used in ext2_dax_write_iter() in the same file and in ext4, xfs, f2fs among others, is: if (ret > 0) ret = generic_write_sync(iocb, ret); Found by Linux Verification Center (linuxtesting.org) with SVACE. [JK: Reflect also filemap_write_and_wait() return value]

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

6.5 ≤ v < 6.12.976.5 ≤ v < 6.18.406.5 ≤ v < 6.6.1456.5 ≤ v < 7.1.56.5 ≤ v < 7.26.5fb5de4358e1aa4753dce73c4dc1aca73ff39cedd
Vendor states this is fixed in 8990dbb7065b0b002b1e58b9091a5b61f5e94dbe (fixed)
Vendor states this is fixed in 8d70b3973020e59845c0bdad90e0b9c2295fd493 (fixed)
Vendor states this is fixed in a4659be0bc7cb1856ffb15b67f903229ae8891ec (fixed)
Vendor states this is fixed in b6bc07e49a5fbb335f56eb90cd63dec6584c77d3 (fixed)
Vendor states this is fixed in ffa974b2f50ad8b911b9066d7aed84ad0afabcdb (fixed)
Vendor states this is fixed in 6.12.97 (unaffected)
Vendor states this is fixed in 6.18.40 (unaffected)
Vendor states this is fixed in 6.5 (unaffected)
Vendor states this is fixed in 6.6.145 (unaffected)
Vendor states this is fixed in 7.1.5 (unaffected)
Vendor states this is fixed in 7.2 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card