CVE-2026-92502
kernel: ext4: clear stale xarray tags on folios skipped during writeback
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · September 17, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's ext4 filesystem. When the system is configured with data=journal mode, a local attacker could exploit a race condition during system reboot. This issue prevents the proper clearing of internal data flags, which can lead to data loss or corruption during the shutdown process.
Statement
This vulnerability is rated as Moderate because it requires a non-standard configuration and local access to trigger, with impact limited to potential unwritten data loss during system reboot rather than privilege escalation. On Red Hat Enterprise Linux, ext4 filesystems default to data=ordered mode and are not susceptible under standard deployments. Systems are only exposed if an administrator explicitly enables full data journaling via the data=journal mount setting or filesystem flag.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition