CVE-2026-74358
Last modified
CVE-2026-74358 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of i_flags, and ext4_test_inode_state() applies the corresponding +32 offset. The fast-commit wait and wake paths open-coded the wait key with the raw EXT4_STATE_* value. Add small helpers for the state wait word and bit, and use them for the FC_COMMITTING and FC_FLUSHING_DATA waits so the wait key follows the same mapping as the state helpers.. EPSS estimates a 0.17% chance of exploitation in the next 30 days.
Description
In the Linux kernel, the following vulnerability has been resolved: ext4: fix fast commit wait/wake bit mapping on 64-bit On 64-bit, ext4 dynamic inode states live in the upper half of i_flags, and ext4_test_inode_state() applies the corresponding +32 offset. The fast-commit wait and wake paths open-coded the wait key with the raw EXT4_STATE_* value. Add small helpers for the state wait word and bit, and use them for the FC_COMMITTING and FC_FLUSHING_DATA waits so the wait key follows the same mapping as the state helpers.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 857d32f2618166765ce9306a246d0745afc76859, < e82d515092a0cf2bca92f399d5c330c324879cea; >= 857d32f2618166765ce9306a246d0745afc76859, < d06df6e447a8510f86db44b2522d5375362a9499; >= 857d32f2618166765ce9306a246d0745afc76859, < 8b3bc93fee6771775243665a0cf31857d6659775 |
| Linux | Linux | 6.16 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-74358?
How severe is CVE-2026-74358?
How do I fix CVE-2026-74358?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-74352In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74353In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74354In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74355In the Linux kernel, the following vulnerability has been re…8.2
- CVE-2026-74356In the Linux kernel, the following vulnerability has been re…7.4
- CVE-2026-74357In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-74359In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-7436The WPC Badge Management for WooCommerce plugin for WordPres…6.4
- CVE-2026-74360In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74361In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-74362In the Linux kernel, the following vulnerability has been re…
- CVE-2026-74363In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-74358?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
