CVE-2026-45920
kernel: ext4: fix dirtyclusters double decrement on fs shutdown
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 27, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's ext4 filesystem. This vulnerability allows a local user to trigger an inconsistency in the dirty clusters count during filesystem shutdown. The issue stems from a double decrement in the error handling path, which can lead to system instability and a denial of service.
Statement
This vulnerability is rated as having a Low severity for Red Hat Enterprise Linux because triggering it requires an uncommon sequence of disk write failures during an ext4 filesystem shutdown, resulting merely in a non-fatal kernel warning during unmount. The flaw cannot be exploited across the network and does not allow unauthorized privilege escalation, arbitrary code execution, or persistent data corruption. Consequently, the practical operational impact is limited to diagnostic log noise under rare error conditions on local systems.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-911 · Improper Update of Reference Count