CVE Database›Document archive›CVE-2026-92502

CVE-2026-92502

kernel: ext4: clear stale xarray tags on folios skipped during writeback

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · September 17, 2026

Updated · November 1, 2026

Description

A flaw was found in the Linux kernel's ext4 filesystem. When the system is configured with data=journal mode, a local attacker could exploit a race condition during system reboot. This issue prevents the proper clearing of internal data flags, which can lead to data loss or corruption during the shutdown process.

Statement

This vulnerability is rated as Moderate because it requires a non-standard configuration and local access to trigger, with impact limited to potential unwritten data loss during system reboot rather than privilege escalation. On Red Hat Enterprise Linux, ext4 filesystems default to data=ordered mode and are not susceptible under standard deployments. Systems are only exposed if an administrator explicitly enables full data journaling via the data=journal mount setting or filesystem flag.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-367 · Time-of-check Time-of-use (TOCTOU) Race Condition