What’s Vulnerable › Vulnerabilities

CVE-2026-74596: fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-22 · updated 2026-10-21

Description

In the Linux kernel, the following vulnerability has been resolved: fs,fsverity: remove check for fsverity being enabled in setattr_prepare() The check that fs-verity is available in the kernel is not necessary here. Filesystems could have fsverity files even without fs-verity enabled. In that case, truncate on fsverity file will succeed, what this check is trying to prevent.

Affected products

• Linux kernel: 7.0 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/2d2b2ed7bdcc6df4942292318c5455b5e94ba525
• https://git.kernel.org/stable/c/3f3b0898557a93122a7f941e6a89adef2bb29ce4
• https://git.kernel.org/stable/c/b4c0c41b952c21baed3f822eab508ebbd1d355d9
• https://git.kernel.org/stable/c/d2f96bcb89d36d488a10e3bcf819b98536968286
• https://git.kernel.org/stable/c/fd4ed50c134fd9f2334b8b29d117f3af5fe250e9

Get alerted when CVE-2026-74596 or the next vulnerability affects your stack