CVE-2026-100073
Last modified
CVE-2026-100073 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4: correct the reserved credits for extent conversion") was correct to note that we need to reserve enough credits for all extents possibly underlying a large folio. However it was too eager to reduce the number of reserved credits.
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: fix transaction overflow during writeback Commit 95ad8ee45cdb ("ext4: correct the reserved credits for extent conversion") was correct to note that we need to reserve enough credits for all extents possibly underlying a large folio. However it was too eager to reduce the number of reserved credits. Extent conversion may not only need to touch several leaf extent blocks, it may also need to split extents - for example a single large unwritten extent may need to be split into many small written ones in case of sparse folio dirtying. This can thus result not only in extent leaf modifications but also in a need to allocate new extent tree nodes. As a result the reserved transaction credits were not sufficient in some corner cases. Use ext4_meta_trans_blocks() for correct upper bound credit estimate.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 95ad8ee45cdbc321c135a2db895d48b374ef0f87, < a22464c5df5827e884a5a7d3d8fb03870e5bb6c8; >= 95ad8ee45cdbc321c135a2db895d48b374ef0f87, < 46e8e31771f4f1c5e1cdec37a889a6730e42e9f1; 2b6d39229bc783198222cddd31e2fbded93c8db7; >= 6.16.3, < 6.17 |
| Linux | Linux | 6.17 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-100073?
How severe is CVE-2026-100073?
How do I fix CVE-2026-100073?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-10005Use after free in WebAppInstalls in Google Chrome on Mac pri…7.5
- CVE-2026-10006Race in WebAudio in Google Chrome prior to 148.0.7778.216 al…7.5
- CVE-2026-10007Use after free in SVG in Google Chrome prior to 148.0.7778.2…8.8
- CVE-2026-100070In the Linux kernel, the following vulnerability has been re…
- CVE-2026-100071In the Linux kernel, the following vulnerability has been re…
- CVE-2026-100072In the Linux kernel, the following vulnerability has been re…
- CVE-2026-100074In the Linux kernel, the following vulnerability has been re…
- CVE-2026-100075In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-100076In the Linux kernel, the following vulnerability has been re…
- CVE-2026-100077In the Linux kernel, the following vulnerability has been re…
- CVE-2026-100078In the Linux kernel, the following vulnerability has been re…
- CVE-2026-100079In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-100073?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
