CVE-2026-100073CWE-617

CVE-2026-100073

Medium · published September 25, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
0.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ext4: fix transaction overflow during writeback

Commit 95ad8ee45cdb ("ext4: correct the reserved credits for extent

conversion") was correct to note that we need to reserve enough credits

for all extents possibly underlying a large folio. However it was too

eager to reduce the number of reserved credits. Extent conversion may

not only need to touch several leaf extent blocks, it may also need to

split extents - for example a single large unwritten extent may need to

be split into many small written ones in case of sparse folio dirtying.

This can thus result not only in extent leaf modifications but also in a

need to allocate new extent tree nodes. As a result the reserved

transaction credits were not sufficient in some corner cases. Use

ext4_meta_trans_blocks() for correct upper bound credit estimate.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00100 · 0.8th percentile
Weakness
CWE-617 · Reachable Assertion
Published
2026-09-25T18:17Z
Affected products (2)
ProductVersionsFixed in
linux/linux_kernel≥ 6.16.3, < 6.176.17
linux/linux_kernel≥ 6.17, < 7.2.67.2.6
References (2)
EPSS history
Timeline
  • 27 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 25 SEP 13:06Z
    ext4: fix transaction overflow during writeback
    cvelistv5