CVE-2026-46002 ext2: reject inodes with zero i_nlink and valid mode in ext2_iget()

🗓️ 27 May 2026 12:55:57Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Ext2 now rejects inodes with zero i_nlink and valid mode to prevent WARN_ON in drop_nlink from crafted images.

Reporter	Title	Published	Views	Family All 81
Tenable Nessus	Amazon Linux 2 : kernel, --advisory ALAS2KERNEL-5.10-2026-123 (ALASKERNEL-5.10-2026-123)	22 Jun 202600:00	–	nessus
Tenable Nessus	Debian dla-4664 : ata-modules-5.10.0-43-armmp-di - security update	3 Jul 202600:00	–	nessus
Tenable Nessus	Debian dla-4665 : affs-modules-6.1.0-48-4kc-malta-di - security update	3 Jul 202600:00	–	nessus
Tenable Nessus	Debian dla-4671 : linux-config-6.1 - security update	6 Jul 202600:00	–	nessus
Tenable Nessus	Oracle Linux 10 / 9 : Unbreakable Enterprise kernel (ELSA-2026-50372)	6 Jul 202600:00	–	nessus
Tenable Nessus	Photon OS 4.0: Linux PHSA-2026-4.0-1028	5 Jun 202600:00	–	nessus
Tenable Nessus	Photon OS 5.0: Linux PHSA-2026-5.0-0862	6 Jun 202600:00	–	nessus
Tenable Nessus	Ubuntu 26.04 LTS : Linux kernel vulnerabilities (USN-8488-1)	3 Jul 202600:00	–	nessus
Tenable Nessus	Ubuntu 26.04 LTS : Linux kernel (OEM) vulnerabilities (USN-8489-1)	3 Jul 202600:00	–	nessus
Tenable Nessus	Ubuntu 26.04 LTS : Linux kernel (NVIDIA) vulnerabilities (USN-8507-1)	7 Jul 202600:00	–	nessus

Source	Link
git	www.git.kernel.org/stable/c/1b80cf48bcf0e1937af9cd6c7beb188762bbf7c5
git	www.git.kernel.org/stable/c/25947cc5b2374cd5bf627fe3141496444260d04f
git	www.git.kernel.org/stable/c/2dde6377ab2e46bb80cf066c659ef016f3ad7a9b
git	www.git.kernel.org/stable/c/32e0b925572686399243834ec99e2a9d85c62eae
git	www.git.kernel.org/stable/c/470264bbec499e276a89a6431144ae58f411ea4d
git	www.git.kernel.org/stable/c/9e2d67fb2b73eeff8b601e26b332128eae8147bb
git	www.git.kernel.org/stable/c/a69a0c5156b6f0092b9fcf44517f5831a962de2d
git	www.git.kernel.org/stable/c/d3af04a43db86379df7438bf8bade71685b8a239
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46002.json
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-46002

15 Jul 2026 01:48Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5

EPSS0.00123