CVE-2026-45899
In the Linux kernel, the following vulnerability has been resolved: ext4: drop extent cache when splitting extent fails When the split extent fails, we might leave some extents still being processed and return an error directly, which will result in stale extent entries remaining in the extent status tree. So drop all of the remaining potentially stale extents if the splitting fails.
Affected versions
Linux kernel versions
3.12
and later are affected. Fixed in
5.10.253,
5.15.203,
6.6.130,
6.12.75,
6.18.14,
6.19.4,
7.0
and their respective stable series.
References
The following references provide additional information about CVE-2026-45899 including vendor advisories, patch commits, exploit details, and third-party analysis. Links are sourced from the NIST NVD database.
-
PatchKernel patch commithttps://git.kernel.org/stable/c/120c6bd7ca9d3e80a968b758cbb3fbd67570f132
-
PatchKernel patch commithttps://git.kernel.org/stable/c/31bf37cf53ede8145e2bc62da803d4506da92975
-
PatchKernel patch commithttps://git.kernel.org/stable/c/337506dc652383c80839edb8d8dcdd8ff2129b4f
Frequently asked questions
-
What is CVE-2026-45899?
CVE-2026-45899 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 3.12 onward and has been patched in 5.10.253, 5.15.203, 6.6.130 and others. CVE-2026-45899 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-45899?
Yes — CVE-2026-45899 has been patched. Fixed versions include 5.10.253, 5.15.203, 6.6.130 and others. If you are running Linux kernel 3.12 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-45899 actively exploited?
No — CVE-2026-45899 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.