CVE-2026-93269
In the Linux kernel, the following vulnerability has been resolved: ext4: fix circular lock dependency in ext4_ext_migrate Move iput(tmp_inode) after ext4_writepages_up_write() to avoid a circular lock dependency between s_writepages_rwsem and sb_internal (freeze protection). The deadlock scenario: CPU0 (EXT4_IOC_MIGRATE) CPU1 (orphan cleanup during mount) ---- ---- ext4_ext_migrate() ext4_writepages_down_write() s_writepages_rwsem (write) ext4_evict_inode() sb_start_intwrite() [sb_internal] ... ext4_writepages() s_writepages_rwsem (read) [BLOCKED] iput(tmp_inode) ext4_evict_inode() sb_start_intwrite() [BLOCKED] The tmp_inode is a temporary inode with nlink=0 created solely for building the extent tree. Its eviction does not require s_writepages_rwsem protection, so deferring iput() until after releasing the rwsem is safe.
Affected versions
Linux kernel versions
4.9.215,
4.14.172,
4.19.107,
5.4.23,
5.5.7,
5.6
and later are affected. Fixed in
6.6.157,
6.12.110,
6.18.52,
7.2.6,
7.3-rc1
and their respective stable series.
References
5 totalFrequently asked questions
-
What is CVE-2026-93269?
CVE-2026-93269 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 4.9.215 onward and has been patched in 6.6.157, 6.12.110, 6.18.52 and others. CVE-2026-93269 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-93269?
Yes. CVE-2026-93269 has been patched. Fixed versions include 6.6.157, 6.12.110, 6.18.52 and others. If you are running Linux kernel 4.9.215 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-93269 actively exploited?
No. CVE-2026-93269 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.