{"id":"CVE-2026-74596","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs,fsverity: remove check for fsverity being enabled in setattr_prepare()\n\nThe check that fs-verity is available in the kernel is not necessary\nhere","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nfs,fsverity: remove check for fsverity being enabled in setattr_prepare()\n\nThe check that fs-verity is available in the kernel is not necessary\nhere. Filesystems could …","severity":"low","vendor":"Linux","product":"Linux","affected":["Linux >= 2efdeec99ca09a9d638e1bcdc1a4afbfe3b4f2ec < b4c0c41b952c21baed3f822eab508ebbd1d355d9","Linux >= e9734653c523c744f03333ece6ae7a315187f05c < 2d2b2ed7bdcc6df4942292318c5455b5e94ba525","Linux >= e9734653c523c744f03333ece6ae7a315187f05c < d2f96bcb89d36d488a10e3bcf819b98536968286","Linux 7.0"],"published":"2026-08-22","updated":"2026-10-15","sourceUpdated":"2026-10-15T11:17:48.163","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-74596","references":[{"url":"https://git.kernel.org/stable/c/2d2b2ed7bdcc6df4942292318c5455b5e94ba525","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/b4c0c41b952c21baed3f822eab508ebbd1d355d9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/d2f96bcb89d36d488a10e3bcf819b98536968286","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/fd4ed50c134fd9f2334b8b29d117f3af5fe250e9","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/3f3b0898557a93122a7f941e6a89adef2bb29ce4"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74596.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-74596"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2521437"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-74596"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-74596"},{"url":"https://kernelcve.org/list/?q=CVE-2026-74596"},{"url":"https://lore.kernel.org/linux-cve-announce/2026082214-CVE-2026-74596-8356@gregkh/T"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"epss":0.00209,"epssPercentile":0.10958,"ingestedAt":"2026-08-23T09:45:33.583Z","cvss":3.3,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","cvssSource":"vendor","cwe":["CWE-693"],"slug":"CVE-2026-74596","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nfs,fsverity: remove check for fsverity being enabled in setattr_prepare()\n\nThe check that fs-verity is available in the kernel is not necessary\nhere. Filesystems could have fsverity files even without fs-verity\nenabled. In that case, truncate on fsverity file will succeed, what this\ncheck is trying to prevent.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6 · no fix planned: Red Hat Enterprise Linux 6 · updated 2026-10-26 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74596.json)","depth":"sunlit","depthScore":18,"depthScoreParts":{"impact":18.2,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":229416,"id":"CVE-2026-74596","ts":1793019752092,"field":"cvss","old":null,"new":"3.3"},{"seq":229415,"id":"CVE-2026-74596","ts":1793019752092,"field":"severity","old":"none","new":"low"}]}