---
id: CVE-2026-74596
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

  The check that fs-verity is available in the kernel is not necessary
  here
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

  The check that fs-verity is available in the kernel is not necessary
  here. Filesystems could …
severity: low
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 2efdeec99ca09a9d638e1bcdc1a4afbfe3b4f2ec <
    b4c0c41b952c21baed3f822eab508ebbd1d355d9
  - >-
    Linux >= e9734653c523c744f03333ece6ae7a315187f05c <
    2d2b2ed7bdcc6df4942292318c5455b5e94ba525
  - >-
    Linux >= e9734653c523c744f03333ece6ae7a315187f05c <
    d2f96bcb89d36d488a10e3bcf819b98536968286
  - Linux 7.0
published: '2026-08-22'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T11:17:48.163'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74596'
references:
  - url: 'https://git.kernel.org/stable/c/2d2b2ed7bdcc6df4942292318c5455b5e94ba525'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b4c0c41b952c21baed3f822eab508ebbd1d355d9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/d2f96bcb89d36d488a10e3bcf819b98536968286'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fd4ed50c134fd9f2334b8b29d117f3af5fe250e9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3f3b0898557a93122a7f941e6a89adef2bb29ce4'
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74596.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-74596'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2521437'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-74596'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-74596'
  - url: 'https://kernelcve.org/list/?q=CVE-2026-74596'
  - url: >-
      https://lore.kernel.org/linux-cve-announce/2026082214-CVE-2026-74596-8356@gregkh/T
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
epss: 0.00209
epssPercentile: 0.10958
ingestedAt: '2026-08-23T09:45:33.583Z'
cvss: 3.3
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'
cvssSource: vendor
cwe:
  - CWE-693
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

fs,fsverity: remove check for fsverity being enabled in setattr_prepare()

The check that fs-verity is available in the kernel is not necessary
here. Filesystems could have fsverity files even without fs-verity
enabled. In that case, truncate on fsverity file will succeed, what this
check is trying to prevent.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 6 · no fix planned: Red Hat Enterprise Linux 6 · updated 2026-10-26 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-74596.json)