A small but important defensive change landed in the Linux kernel this November to close CVE-2025-40190, an ext4 robustness bug that could let an EA (extended-attribute) inode’s reference count underflow during xattr updates and trigger filesystem errors, orphan churn, and potential...