CVE Database›Document archive›CVE-2026-46052

CVE-2026-46052

kernel: ceph: only d_add() negative dentries when they are unhashed

Loading…

Severity

Moderate

Red Hat Product Security

7

CVSS 3.1

Review impact separately from score.

Published · May 27, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's Ceph filesystem. A local user or process interacting with the Ceph filesystem could trigger a dcache hash corruption when a negative dentry is incorrectly re-added to the dcache hash while it is already present. This can cause the system to experience an RCU stall, leading to a system hang and a Denial of Service (DoS).

Statement

This vulnerability is evaluated as Moderate severity because it requires local access to an active Ceph filesystem mount, limiting the threat scope to systems running the kernel CephFS client. When resolving non-existent file entries within a directory, corrupted hash links can cause the kernel to enter an unrecoverable infinite loop, triggering an RCU stall and causing a system freeze. Standard environments that do not configure or mount Ceph network storage are not vulnerable to this condition.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-464 · Addition of Data Structure Sentinel