CVE-2026-100073: ext4: fix transaction overflow during writeback

Published Sep 25, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix transaction overflow during writeback

Commit 95ad8ee45cdb ("ext4: correct the reserved credits for extent conversion") was correct to note that we need to reserve enough credits for all extents possibly underlying a large folio. However it was too eager to reduce the number of reserved credits. Extent conversion may not only need to touch several leaf extent blocks, it may also need to split extents - for example a single large unwritten extent may need to be split into many small written ones in case of sparse folio dirtying. This can thus result not only in extent leaf modifications but also in a need to allocate new extent tree nodes. As a result the reserved transaction credits were not sufficient in some corner cases. Use ext4metatransblocks() for correct upper bound credit estimate.

Affected Software

1 affected component
Linux Linux kernel

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade to a fixed release to a version that resolves this vulnerability.

    Patch 95ad8ee45cdb

Event History

Sep 25, 2026
CVE Published
via MITRE·01:06 PM
Data Sourced
via MITRE·01:06 PM
Description
Data Sourced
via NVD·02:17 PM
Description

Frequently Asked Questions

1

Which filesystem workloads are most likely to encounter this issue?

The issue can occur during extent conversion for large folios, particularly when sparse dirtying requires a large unwritten extent to be split into multiple smaller written extents. These conversions can require both changes to multiple extent leaf blocks and allocation of new extent-tree nodes.

2

What is the immediate failure condition described for affected systems?

The transaction may reserve too few credits for the required extent conversion work. The insufficient reservation occurs in corner cases where extent splitting and new extent-tree node allocation are needed during writeback.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203