CVE-2026-74307: ext4: validate donor file superblock early in EXT4_IOC_MOVE_EXT
ext4: validate donor file superblock early in EXT4IOCMOVEEXT
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure EXT4_IOC_MOVE_EXT requests with a donor fd that refers to a file on a different filesystem are rejected before lock acquisition (cross-filesystem donor fds must be rejected early in EXT4_IOC_MOVE_EXT) to avoid the circular lock dependency/deadlock described.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74307?
CVE-2026-74307 has a risk rating of 27, indicating a significant level of severity.
How do I fix CVE-2026-74307?
To mitigate CVE-2026-74307, ensure that you are using the latest version of the Linux kernel where this vulnerability has been resolved.
What does CVE-2026-74307 affect?
CVE-2026-74307 affects the ext4 filesystem in the Linux kernel, particularly related to the EXT4_IOC_MOVE_EXT ioctl.
What are the consequences of CVE-2026-74307?
Exploitation of CVE-2026-74307 could lead to unauthorized file operations within the ext4 filesystem.
How can I determine if I am vulnerable to CVE-2026-74307?
You can determine vulnerability to CVE-2026-74307 by checking your Linux kernel version against updates that address this vulnerability.