Impact
The Linux kernel bug involves an incorrect mapping of the wait and wake keys used by ext4’s fast‑commit mechanism on 64‑bit builds. Dynamic inode states are stored in the upper half of the i_flags field and ext4_test_inode_state() applies a +32 offset, yet the fast‑commit paths hard‑coded the wait key with the raw EXT4_STATE_* value. Based on the description, it is inferred that this mismatch can cause the kernel to wait for or wake on incorrect state transitions during commit operations, leading to improper synchronization and potentially causing stalls or data inconsistencies—an integrity issue highlighted by CWE‑1102.
Affected Systems
The defect applies to any 64‑bit Linux kernel implementing the ext4 filesystem that has not yet incorporated the commit that adds the helper functions. Consequently, any such kernel predating the change is vulnerable.
Risk and Exploitability
The vulnerability has a CVSS score of 5.5, indicating moderate severity. The EPSS score is reported as less than 1% and the issue is not listed in CISA’s KEV catalog. No public exploits have been documented. Based on the description, it is inferred that an attacker would need local system access with sufficient privilege to trigger the buggy commit path, making exploitation more difficult. Given the low exploitation probability and absence of known exploits, the risk is moderate but warrants prompt remediation.
OpenCVE Enrichment