CVE-2026-46052
kernel: ceph: only d_add() negative dentries when they are unhashed
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 27, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's Ceph filesystem. A local user or process interacting with the Ceph filesystem could trigger a dcache hash corruption when a negative dentry is incorrectly re-added to the dcache hash while it is already present. This can cause the system to experience an RCU stall, leading to a system hang and a Denial of Service (DoS).
Statement
This vulnerability is evaluated as Moderate severity because it requires local access to an active Ceph filesystem mount, limiting the threat scope to systems running the kernel CephFS client. When resolving non-existent file entries within a directory, corrupted hash links can cause the kernel to enter an unrecoverable infinite loop, triggering an RCU stall and causing a system freeze. Standard environments that do not configure or mount Ceph network storage are not vulnerable to this condition.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-464 · Addition of Data Structure Sentinel