In the Linux kernel, the following vulnerability has been resolved:
ext4: guard against EA inode refcount underflow in xattr update
syzkaller found a path where ext4_xattr_inode_update_ref() reads an EA inode refcount that is already <= 0 and then applies ref_change (often -1). That lets the refcount underflow and we proceed with a bogus value, triggering errors like:
EXT4-fs error: EA inode <n> ref underflow: ref_count=-1 ref_change=-1 EXT4-fs warning: ea_inode dec ref err=-117
Make the invariant explicit: if the current refcount is non-positive, treat this as on-disk corruption, emit ext4_error_inode(), and fail the operation with -EFSCORRUPTED instead of updating the refcount. Delete the WARN_ONCE() as negative refcounts are now impossible; keep error reporting in ext4_error_inode().
This prevents the underflow and the follow-on orphan/cleanup churn.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.247-246.989Upgrade kernel-livepatch-5.15.195-136.216Upgrade kernel-toolsUpgrade bpftoolUpgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade python-perf-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf6.12-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel6.12Upgrade perf-debuginfoUpgrade kernel-libbpf-debuginfoUpgrade kernel6.12-libbpf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool6.12-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel6.12-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.158-178.288Upgrade kernel-libbpfUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-libbpfUpgrade kernel6.12-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel6.12-libbpf-staticUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel6.12-tools-debuginfoUpgrade python3-perf6.12Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-debuginfo-common-x86_64Upgrade bpftool6.12Upgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-livepatch-6.12.55-74.119Upgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-headersUpgrade python3-perfUpgrade kernel6.12-toolsUpgrade kernel-libbpf-develUpgrade kernel6.12-tools-devel | Dec 9, 2025 | Nov 12, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 14, 2025 | Nov 14, 2025 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftool | Mar 17, 2026 | Mar 17, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade python3-perf | Mar 10, 2026 | Mar 10, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Dec 15, 2025 | Nov 12, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Nov 12, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub