CVE Database›Document archive›CVE-2026-45920

CVE-2026-45920

kernel: ext4: fix dirtyclusters double decrement on fs shutdown

Loading…

Severity

Low

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · May 27, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's ext4 filesystem. This vulnerability allows a local user to trigger an inconsistency in the dirty clusters count during filesystem shutdown. The issue stems from a double decrement in the error handling path, which can lead to system instability and a denial of service.

Statement

This vulnerability is rated as having a Low severity for Red Hat Enterprise Linux because triggering it requires an uncommon sequence of disk write failures during an ext4 filesystem shutdown, resulting merely in a non-fatal kernel warning during unmount. The flaw cannot be exploited across the network and does not allow unauthorized privilege escalation, arbitrary code execution, or persistent data corruption. Consequently, the practical operational impact is limited to diagnostic log noise under rare error conditions on local systems.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-911 · Improper Update of Reference Count