CVE-2026-92500

A flaw was found in the Linux kernel's ext4 filesystem. A race condition can occur during data write operations when the system attempts to handle inline data concurrently. This timing issue can lead to a system crash, causing a denial of service, or potentially result in data loss.

An ext4 inline data race can occur when write_begin() prepares an inline write but a concurrent path such as ext4_page_mkwrite() converts the inode to extent based storage before write_end() completes. The old write_end logic checked the live inode state instead of the state prepared by write_begin(), so it could miss the inline write_end path and execute extent based logic without allocated block buffers. This can lead to a NULL pointer dereference through a NULL folio_buffers(folio), a BUG_ON panic in ext4_write_inline_data_end(), or possible file data loss. For the CVSS the PR:L is used because a local user or process with write access to files on an affected ext4 filesystem may be able to trigger the race without administrative privileges. The issue is not network reachable and requires local filesystem activity plus timing of concurrent write and page fault or conversion paths. Impact is at least local denial of service via kernel crash and low integrity impact due to possible data loss.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.