CVE-2026-74362

Source
https://cve.org/CVERecord?id=CVE-2026-74362
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74362.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74362
Downstream
Published
2026-08-15T05:58:45.553Z
Modified
2026-08-18T03:31:00.577803120Z
Summary
ext2: fix ignored return value of generic_write_sync()
Details

In the Linux kernel, the following vulnerability has been resolved:

ext2: fix ignored return value of genericwritesync()

Fix ext2diowriteiter() to propagate the error returned by genericwritesync() instead of silently discarding it, which could cause write(2) to return success to userspace on OSYNC/O_DSYNC files even when the sync failed.

The correct pattern, already used in ext2daxwriteiter() in the same file and in ext4, xfs, f2fs among others, is: if (ret > 0) ret = genericwrite_sync(iocb, ret);

Found by Linux Verification Center (linuxtesting.org) with SVACE.

[JK: Reflect also filemapwriteand_wait() return value]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74362.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fb5de4358e1aa4753dce73c4dc1aca73ff39cedd
Fixed
8990dbb7065b0b002b1e58b9091a5b61f5e94dbe
Fixed
8d70b3973020e59845c0bdad90e0b9c2295fd493
Fixed
ffa974b2f50ad8b911b9066d7aed84ad0afabcdb
Fixed
b6bc07e49a5fbb335f56eb90cd63dec6584c77d3
Fixed
a4659be0bc7cb1856ffb15b67f903229ae8891ec

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74362.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74362.json"