{"cve":"CVE-2026-74362","nvd":{"published":"2026-08-15T06:22:37.783","modified":"2026-08-17T06:19:30.960","status":"Received","description":"In the Linux kernel, the following vulnerability has been resolved:\n\next2: fix ignored return value of generic_write_sync()\n\nFix ext2_dio_write_iter() to propagate the error returned by\ngeneric_write_sync() instead of silently discarding it, which could\ncause write(2) to return success to userspace on O_SYNC/O_DSYNC files\neven when the sync failed.\n\nThe correct pattern, already used in ext2_dax_write_iter() in the same\nfile and in ext4, xfs, f2fs among others, is:\n    if (ret > 0)\n        ret = generic_write_sync(iocb, ret);\n\nFound by Linux Verification Center (linuxtesting.org) with SVACE.\n\n[JK: Reflect also filemap_write_and_wait() return value]","cvss_v4":null,"cvss_v3":null,"cwes":[],"references":["https://git.kernel.org/stable/c/8990dbb7065b0b002b1e58b9091a5b61f5e94dbe","https://git.kernel.org/stable/c/8d70b3973020e59845c0bdad90e0b9c2295fd493","https://git.kernel.org/stable/c/a4659be0bc7cb1856ffb15b67f903229ae8891ec","https://git.kernel.org/stable/c/b6bc07e49a5fbb335f56eb90cd63dec6584c77d3","https://git.kernel.org/stable/c/ffa974b2f50ad8b911b9066d7aed84ad0afabcdb"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:49:10.689564601+00:00"},"epss":{"cve":"CVE-2026-74362","score":0.00209,"percentile":0.1104,"date":"2026-10-31"},"kev":null,"osv":[],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}