Strix
75.6K

CVE-2026-74596

UnknownEPSS 0.21%

Last modified

CVE-2026-74596 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case, truncate on fsverity file will succeed, what this check is trying to prevent.

Metrics

EPSS Probability
0.21%

10.0th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= cc99c58f735bc55e6321f1f575ea218da91dcc4c, < fd4ed50c134fd9f2334b8b29d117f3af5fe250e9; >= 2efdeec99ca09a9d638e1bcdc1a4afbfe3b4f2ec, < b4c0c41b952c21baed3f822eab508ebbd1d355d9; >= e9734653c523c744f03333ece6ae7a315187f05c, < 2d2b2ed7bdcc6df4942292318c5455b5e94ba525; >= e9734653c523c744f03333ece6ae7a315187f05c, < d2f96bcb89d36d488a10e3bcf819b98536968286
LinuxLinux7.0

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-74596?
In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case, truncate on fsverity file will succeed, what this check is trying to prevent.
How severe is CVE-2026-74596?
Severity scoring for CVE-2026-74596 is pending analysis. The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-74596?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-74596?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST