CVE-2026-98445
Description
A flaw was found in the Linux kernel's XFS file system. A local user could cause a Denial of Service (DoS) by triggering an online file system repair under low-memory conditions. When a memory allocation failure occurs during repair block reservation, the kernel cannot cleanly recover from the error, resulting in storage block leaks and an unexpected file system shutdown.
Statement
This vulnerability is rated as Moderate severity for Red Hat Enterprise Linux because triggering the condition requires high local privileges such as CAP_SYS_ADMIN and concurrent memory exhaustion, confining the impact to a denial of service. While XFS is the standard default filesystem across enterprise installations, the affected online repair functionality is invoked only during specific administrative maintenance tasks rather than normal file operations. Under extreme memory pressure during an active repair operation, a failed internal reservation forces the filesystem into an unrecoverable state and shuts it down, but does not allow privilege escalation or unauthorized data access.
Common Vulnerability Scoring System (CVSS) Score Details
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
The following CVSS metrics and score provided are preliminary and subject to review.
CVSS v3 Score Breakdown
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Base Score | 4.1 | N/A | N/A |
| Attack Vector | Local | N/A | N/A |
| Attack Complexity | High | N/A | N/A |
| Privileges Required | High | N/A | N/A |
| User Interaction | None | N/A | N/A |
| Scope | Unchanged | N/A | N/A |
| Confidentiality | None | N/A | N/A |
| Integrity Impact | None | N/A | N/A |
| Availability Impact | High | N/A | N/A |
Vector
Red Hat: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
