CVE-2026-45974

A flaw was found in the Linux kernel's btrfs filesystem. The btrfs_quota_enable() function contains a logic error where it attempts to access an invalid memory location if a specific key is not found during a search operation. This incorrect handling of search results can lead to invalid leaf access, potentially causing system instability or a denial of service (DoS) for affected systems.

This vulnerability is rated as having a Moderate impact because exploitation is restricted to local attackers with permissions to manage filesystem quotas, resulting solely in a denial of service through system instability without compromising data confidentiality or integrity. In standard Red Hat Enterprise Linux environments, Btrfs is neither configured by default nor widely deployed, substantially limiting the practical attack surface. Furthermore, earlier supported releases such as RHEL 8 and RHEL 9 are not affected as the vulnerable code is not present in their kernel builds.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.