Description
In the Linux kernel, the following vulnerability has been resolved:

ext4: fix fast commit wait/wake bit mapping on 64-bit

On 64-bit, ext4 dynamic inode states live in the upper half of i_flags,
and ext4_test_inode_state() applies the corresponding +32 offset.

The fast-commit wait and wake paths open-coded the wait key with the raw
EXT4_STATE_* value. Add small helpers for the state wait word and bit,
and use them for the FC_COMMITTING and FC_FLUSHING_DATA waits so the wait
key follows the same mapping as the state helpers.
Published: 2026-08-15
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Linux kernel bug involves an incorrect mapping of the wait and wake keys used by ext4’s fast‑commit mechanism on 64‑bit builds. Dynamic inode states are stored in the upper half of the i_flags field and ext4_test_inode_state() applies a +32 offset, yet the fast‑commit paths hard‑coded the wait key with the raw EXT4_STATE_* value. Based on the description, it is inferred that this mismatch can cause the kernel to wait for or wake on incorrect state transitions during commit operations, leading to improper synchronization and potentially causing stalls or data inconsistencies—an integrity issue highlighted by CWE‑1102.

Affected Systems

The defect applies to any 64‑bit Linux kernel implementing the ext4 filesystem that has not yet incorporated the commit that adds the helper functions. Consequently, any such kernel predating the change is vulnerable.

Risk and Exploitability

The vulnerability has a CVSS score of 5.5, indicating moderate severity. The EPSS score is reported as less than 1% and the issue is not listed in CISA’s KEV catalog. No public exploits have been documented. Based on the description, it is inferred that an attacker would need local system access with sufficient privilege to trigger the buggy commit path, making exploitation more difficult. Given the low exploitation probability and absence of known exploits, the risk is moderate but warrants prompt remediation.

Generated by OpenCVE AI on August 22, 2026 at 03:14 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that includes the ext4 wait/wake mapping fix, such as the latest stable release provided by your distribution’s package repository.
  • If a kernel upgrade is not immediately possible, cherry‑pick or apply the commit identified in the patch to your current kernel source tree and rebuild the kernel.
  • Reboot the system after the update or rebuild to ensure that ext4 operates with the corrected mapping and any in‑flight filesystem state is flushed.

Generated by OpenCVE AI on August 22, 2026 at 03:14 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Sat, 22 Aug 2026 01:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20

Wed, 19 Aug 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-1102
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Sat, 15 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-20

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of i_flags, and ext4_test_inode_state() applies the corresponding +32 offset. The fast-commit wait and wake paths open-coded the wait key with the raw EXT4_STATE_* value. Add small helpers for the state wait word and bit, and use them for the FC_COMMITTING and FC_FLUSHING_DATA waits so the wait key follows the same mapping as the state helpers.
Title ext4: fix fast commit wait/wake bit mapping on 64-bit
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T05:17:52.469Z

Reserved: 2026-08-15T05:44:03.887Z

Link: CVE-2026-74358

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:37.313

Modified: 2026-08-17T06:19:30.537

Link: CVE-2026-74358

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-74358 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-22T03:15:04Z

Weaknesses
  • CWE-1102

    Reliance on Machine-Dependent Data Representation