{"id":"CVE-2026-74596","state":"PUBLISHED","title":"fs,fsverity: remove check for fsverity being enabled in setattr_prepare()","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs,fsverity: remove check for fsverity being enabled in setattr_prepare()\n\nThe check that fs-verity is available in the kernel is not necessary\nhere. Filesystems could have fsverity files even without fs-verity\nenabled. In that case, truncate on fsverity file will succeed, what this\ncheck is trying to prevent.","publishedAt":"2026-08-22T15:31:46.383Z","updatedAt":"2026-10-21T12:46:01.695Z","severity":null,"assigner":"Linux","products":["Linux Linux"],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"a4ca8102e70e10f8cfa63d922468d21500f3c090","status":"affected","lessThan":"3f3b0898557a93122a7f941e6a89adef2bb29ce4","versionType":"git"},{"version":"cc99c58f735bc55e6321f1f575ea218da91dcc4c","status":"affected","lessThan":"fd4ed50c134fd9f2334b8b29d117f3af5fe250e9","versionType":"git"},{"version":"2efdeec99ca09a9d638e1bcdc1a4afbfe3b4f2ec","status":"affected","lessThan":"b4c0c41b952c21baed3f822eab508ebbd1d355d9","versionType":"git"},{"version":"e9734653c523c744f03333ece6ae7a315187f05c","status":"affected","lessThan":"2d2b2ed7bdcc6df4942292318c5455b5e94ba525","versionType":"git"},{"version":"e9734653c523c744f03333ece6ae7a315187f05c","status":"affected","lessThan":"d2f96bcb89d36d488a10e3bcf819b98536968286","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/attr.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"7.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"7.0","versionType":"semver"},{"version":"7.1.9","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/attr.c"]}],"references":["https://git.kernel.org/stable/c/3f3b0898557a93122a7f941e6a89adef2bb29ce4","https://git.kernel.org/stable/c/fd4ed50c134fd9f2334b8b29d117f3af5fe250e9","https://git.kernel.org/stable/c/b4c0c41b952c21baed3f822eab508ebbd1d355d9","https://git.kernel.org/stable/c/2d2b2ed7bdcc6df4942292318c5455b5e94ba525","https://git.kernel.org/stable/c/d2f96bcb89d36d488a10e3bcf819b98536968286"],"weaknesses":[],"ingestedAt":"2026-10-29T20:12:58.252Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/74xxx/CVE-2026-74596.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-74596","state":"PUBLISHED","datePublished":"2026-08-22T15:31:46.383Z","dateUpdated":"2026-10-21T12:46:01.695Z","assignerShortName":"Linux","assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateReserved":"2026-08-15T05:44:03.919Z"},"containers":{"cna":{"title":"fs,fsverity: remove check for fsverity being enabled in setattr_prepare()","descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs,fsverity: remove check for fsverity being enabled in setattr_prepare()\n\nThe check that fs-verity is available in the kernel is not necessary\nhere. Filesystems could have fsverity files even without fs-verity\nenabled. In that case, truncate on fsverity file will succeed, what this\ncheck is trying to prevent."}],"affected":[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","versions":[{"version":"a4ca8102e70e10f8cfa63d922468d21500f3c090","status":"affected","lessThan":"3f3b0898557a93122a7f941e6a89adef2bb29ce4","versionType":"git"},{"version":"cc99c58f735bc55e6321f1f575ea218da91dcc4c","status":"affected","lessThan":"fd4ed50c134fd9f2334b8b29d117f3af5fe250e9","versionType":"git"},{"version":"2efdeec99ca09a9d638e1bcdc1a4afbfe3b4f2ec","status":"affected","lessThan":"b4c0c41b952c21baed3f822eab508ebbd1d355d9","versionType":"git"},{"version":"e9734653c523c744f03333ece6ae7a315187f05c","status":"affected","lessThan":"2d2b2ed7bdcc6df4942292318c5455b5e94ba525","versionType":"git"},{"version":"e9734653c523c744f03333ece6ae7a315187f05c","status":"affected","lessThan":"d2f96bcb89d36d488a10e3bcf819b98536968286","versionType":"git"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/attr.c"]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","versions":[{"version":"7.0","status":"affected"},{"version":"0","status":"unaffected","lessThan":"7.0","versionType":"semver"},{"version":"7.1.9","status":"unaffected","lessThanOrEqual":"7.1.*","versionType":"semver"},{"version":"7.2","status":"unaffected","lessThanOrEqual":"*","versionType":"original_commit_for_fix"}],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","programFiles":["fs/attr.c"]}],"references":[{"url":"https://git.kernel.org/stable/c/3f3b0898557a93122a7f941e6a89adef2bb29ce4"},{"url":"https://git.kernel.org/stable/c/fd4ed50c134fd9f2334b8b29d117f3af5fe250e9"},{"url":"https://git.kernel.org/stable/c/b4c0c41b952c21baed3f822eab508ebbd1d355d9"},{"url":"https://git.kernel.org/stable/c/2d2b2ed7bdcc6df4942292318c5455b5e94ba525"},{"url":"https://git.kernel.org/stable/c/d2f96bcb89d36d488a10e3bcf819b98536968286"}],"providerMetadata":{"shortName":"Linux","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","dateUpdated":"2026-10-21T12:46:01.695Z"},"cpeApplicability":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.1.9"},{"vulnerable":true,"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionStartIncluding":"7.0","versionEndExcluding":"7.2"}]}]}],"x_generator":{"engine":"bippy-1.2.0"}}}}}