CVE Feed

    Dashboard / CVE / CVE-2024-26601

    CVE-2024-26601

    In the Linux kernel, the following vulnerability has been resolved: ext4: regenerate buddy after block freeing failed if under fc replay This mostly reverts commit 6bd97bf273bd ("ext4: remove redundant mb_regenerate_buddy()") and reintroduces mb_regenerate_buddy(). Based on code in mb_free_blocks(), fast commit replay can end up marking as free blocks that are already marked as such. This causes corruption of the buddy bitmap so we need to regenerate it in that case.

    Published:Feb 24, 2024
    Last Modified:Aug 4, 2026
    EPS:Feb 24, 2024
    EPSS Score:0.00278
    CVSS Score:7.8

    Affected Products

    Vendor
    Linux
    Product
    Linux Kernel
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Rhel Eus

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-80925 — In the Linux kernel, the following vulnerability has been resolved: vlan: fix skb_under_panic and races when …
    CVE-2026-80924 (CVSS 7.5) — In the Linux kernel, the following vulnerability has been resolved: crypto: krb5 - use kfree_sensitive() for …
    CVE-2026-80923 — In the Linux kernel, the following vulnerability has been resolved: xhci: dbgtty: Fix unregister on tty_regis…
    CVE-2026-80922 — In the Linux kernel, the following vulnerability has been resolved: crypto: qcom-rng - Allow zero as a random…
    CVE-2026-80921 (CVSS 8.8) — In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits …
    CVE-2026-80920 — In the Linux kernel, the following vulnerability has been resolved: io_uring: defer eventfd signaling when qu…
    CVE-2026-80919 — In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix recursive ww_mutex acquir…
    CVE-2026-80918 — In the Linux kernel, the following vulnerability has been resolved: HID: core: fix number/pointer type confus…
    CVE-2026-80917 — In the Linux kernel, the following vulnerability has been resolved: PCI: host-generic: Fix NULL pointer deref…
    CVE-2026-80916 — In the Linux kernel, the following vulnerability has been resolved: kcov: fix data corruption and race condit…

    References

    https://git.kernel.org/stable/c/6b0d48647935e4b8c7b75d1eccb9043fcd4ee581
    https://git.kernel.org/stable/c/78327acd4cdc4a1601af718b781eece577b6b7d4
    https://git.kernel.org/stable/c/94ebf71bddbcd4ab1ce43ae32c6cb66396d2d51a
    https://git.kernel.org/stable/c/c1317822e2de80e78f137d3a2d99febab1b80326
    https://git.kernel.org/stable/c/c9b528c35795b711331ed36dc3dbee90d5812d4e
    https://git.kernel.org/stable/c/ea42d6cffb0dd27a417f410b9d0011e9859328cb
    https://git.kernel.org/stable/c/6b0d48647935e4b8c7b75d1eccb9043fcd4ee581
    https://git.kernel.org/stable/c/78327acd4cdc4a1601af718b781eece577b6b7d4
    https://git.kernel.org/stable/c/94ebf71bddbcd4ab1ce43ae32c6cb66396d2d51a
    https://git.kernel.org/stable/c/c1317822e2de80e78f137d3a2d99febab1b80326
    https://git.kernel.org/stable/c/c9b528c35795b711331ed36dc3dbee90d5812d4e
    https://git.kernel.org/stable/c/ea42d6cffb0dd27a417f410b9d0011e9859328cb
    https://lists.debian.org/debian-lts-announce/2024/06/msg00017.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High