CVE-2026-45899
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk6th percentile - higher than 6% of all known CVEs
Summary
In the Linux kernel, a vulnerability in the ext4 filesystem was found where stale extent entries may remain in the extent status tree when splitting an extent fails, leading to data inconsistency.
Risk Assessment
The risk involves potential data corruption or unpredictable filesystem behavior, which could result in loss of data integrity if extent splitting operations fail.
Recommendation
It is recommended to immediately update the Linux kernel to a version that includes the fix to drop stale entries from the extent status tree after a failed split.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: ext4: drop extent cache when splitting extent fails When the split extent fails, we might leave some extents still being processed and return an error directly, which will result in stale extent entries remaining in the extent status tree. So drop all of the remaining potentially stale extents if the splitting fails.