ext4: skip extra isize expansion during mount to prevent deadlock

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-93268
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-24 16:17:23 UTC
Updated2026-09-24 16:17:23 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: ext4: skip extra isize expansion during mount to prevent deadlock ext4_try_to_expand_extra_isize() is called from __ext4_mark_inode_dirty() while holding an active jbd2 handle. During mount (!SB_ACTIVE), the expand path may move xattrs to external blocks and release ea_inodes via iput(). When !SB_ACTIVE, iput() calls write_inode_now() which acquires s_writepages_rwsem, creating a circular lock dependency: s_writepages_rwsem --> jbd2_handle --> xattr_sem --> s_writepages_rwsem This can be triggered via: ext4_process_orphan() -> ext4_truncate() -> ext4_mark_inode_dirty() -> ext4_try_to_expand_extra_isize() or: ext4_evict_inode() -> ext4_mark_inode_dirty() -> ext4_try_to_expand_extra_isize() Skip expansion when !SB_ACTIVE. This is a minor loss of functionality (extra isize won't grow for these inodes during mount), which e2fsck can resolve later if needed.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected c8585c6fcaf2011de54c3592e80a634a2b9e1a7f 41897f1bcf4ace5f1f28d0be784b6f4f0e929641 git Not specified
CNA Linux Linux affected c8585c6fcaf2011de54c3592e80a634a2b9e1a7f 9c3469377b1d8caba6bec6ef3c460810bbfb02cc git Not specified
CNA Linux Linux affected c8585c6fcaf2011de54c3592e80a634a2b9e1a7f 1dd4882dbdc8bfdf2182fa388883c143fac0902a git Not specified
CNA Linux Linux affected c8585c6fcaf2011de54c3592e80a634a2b9e1a7f 7ba09330d9ea6e996228316719eae812d7e04983 git Not specified
CNA Linux Linux affected c8585c6fcaf2011de54c3592e80a634a2b9e1a7f c5e6434cc55f30220b228be237bb666351f9f4dd git Not specified
CNA Linux Linux affected c8585c6fcaf2011de54c3592e80a634a2b9e1a7f 7ace189b9ea79cf78df9c32b940ce12735f9459a git Not specified
CNA Linux Linux affected c8585c6fcaf2011de54c3592e80a634a2b9e1a7f 2fb8ff81659a57c42bb7b49e8339a2be2a318ef8 git Not specified
CNA Linux Linux affected c8585c6fcaf2011de54c3592e80a634a2b9e1a7f 7461c60b9c6a839b13ad4c3490681a0cf5aa0637 git Not specified
CNA Linux Linux affected 4.7 Not specified
CNA Linux Linux unaffected 4.7 semver Not specified
CNA Linux Linux unaffected 5.10.270 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.221 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.188 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.110 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.52 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3-rc1 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/9c3469377b1d8caba6bec6ef3c460810bbfb02cc 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/2fb8ff81659a57c42bb7b49e8339a2be2a318ef8 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/c5e6434cc55f30220b228be237bb666351f9f4dd 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/7461c60b9c6a839b13ad4c3490681a0cf5aa0637 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/7ace189b9ea79cf78df9c32b940ce12735f9459a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/7ba09330d9ea6e996228316719eae812d7e04983 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/1dd4882dbdc8bfdf2182fa388883c143fac0902a 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/41897f1bcf4ace5f1f28d0be784b6f4f0e929641 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report