CVE-2026-93268: Linux kernel · ext4: skip extra isize expansion during mount to prevent deadlock
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in c5e6434cc55f30220b228be237bb666351f9f4dd : update Linux kernel when convenient.
Data as of 26 Oct 2026, 13:46 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 9% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in c5e6434cc55f30220b228be237bb666351f9f4dd, 41897f1bcf4ace5f1f28d0be784b6f4f0e929641, 7461c60b9c6a839b13ad4c3490681a0cf5aa0637 +5
Exploitation evidence
Disclosed: evidence found.
CVE published 24 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade to a fixed release listed under Affected software.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
AI-suggested
A fix is available and has been applied in the Linux kernel. Users should update to a kernel version that includes the fix identified by the listed commit hashes. The fix skips extra isize expansion during mount to prevent deadlock, with no further action required. Filesystem consistency can be restored later using e2fsck if needed.
Description
CVE-2026-93268 is a vulnerability in the Linux kernel's ext4 filesystem driver where extra isize expansion during mount can cause a deadlock. The issue arises from a circular lock dependency triggered during inode operations while mounting. The fix involves skipping the extra isize expansion during mount, which may cause a minor loss of functionality that can be corrected later by e2fsck.
References
- git.kernel.org/stable/c/41897f1bcf4ace5f1f28d0be784b6f4f0e929641 (opens in a new tab)
- git.kernel.org/stable/c/9c3469377b1d8caba6bec6ef3c460810bbfb02cc (opens in a new tab)
- git.kernel.org/stable/c/1dd4882dbdc8bfdf2182fa388883c143fac0902a (opens in a new tab)
- git.kernel.org/stable/c/7ba09330d9ea6e996228316719eae812d7e04983 (opens in a new tab)
- git.kernel.org/stable/c/c5e6434cc55f30220b228be237bb666351f9f4dd (opens in a new tab)
- git.kernel.org/stable/c/7ace189b9ea79cf78df9c32b940ce12735f9459a (opens in a new tab)
- git.kernel.org/stable/c/2fb8ff81659a57c42bb7b49e8339a2be2a318ef8 (opens in a new tab)
- git.kernel.org/stable/c/7461c60b9c6a839b13ad4c3490681a0cf5aa0637 (opens in a new tab)