CVE-2026-46080

kernel: ocfs2: split transactions in dio completion to avoid credit exhaustion

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 27, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Oracle Cluster File System 2 (ocfs2) component. During direct I/O (DIO) write operations, specifically in the ocfs2_dio_end_io_write function, an issue with transaction splitting can lead to credit exhaustion in the Journaling Block Device 2 (JBD2) subsystem. This can be exploited by a local attacker to cause a denial of service (DoS) by preventing further journaling operations.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-770 · Allocation of Resources Without Limits or Throttling