CVE-2026-74362

Source
https://cve.org/CVERecord?id=CVE-2026-74362
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74362.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-74362
Downstream
Published
2026-08-15T05:58:45Z
Modified
2026-08-18T03:31:00Z
Summary
ext2: fix ignored return value of generic_write_sync()
Details

In the Linux kernel, the following vulnerability has been resolved:

ext2: fix ignored return value of generic_write_sync()

Fix ext2_dio_write_iter() to propagate the error returned by generic_write_sync() instead of silently discarding it, which could cause write(2) to return success to userspace on O_SYNC/O_DSYNC files even when the sync failed.

The correct pattern, already used in ext2_dax_write_iter() in the same file and in ext4, xfs, f2fs among others, is: if (ret > 0) ret = generic_write_sync(iocb, ret);

Found by Linux Verification Center (linuxtesting.org) with SVACE.

[JK: Reflect also filemap_write_and_wait() return value]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/74xxx/CVE-2026-74362.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
fb5de4358e1aa4753dce73c4dc1aca73ff39cedd
Fixed
8990dbb7065b0b002b1e58b9091a5b61f5e94dbe
Fixed
8d70b3973020e59845c0bdad90e0b9c2295fd493
Fixed
ffa974b2f50ad8b911b9066d7aed84ad0afabcdb
Fixed
b6bc07e49a5fbb335f56eb90cd63dec6584c77d3
Fixed
a4659be0bc7cb1856ffb15b67f903229ae8891ec

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74362.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.5.0
Fixed
6.6.145
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.97
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.40
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-74362.json"