CVE-2026-46106

A flaw was found in the Linux kernel's eventfs component. This vulnerability allows a local attacker to trigger a race condition during remount operations. By exploiting insufficient locking mechanisms when processing event descriptors, an attacker can cause memory corruption, leading to a denial of service (DoS) and system instability.

Red Hat has categorized this flaw as having a Moderate severity rather than Important because triggering the synchronization error requires local access to perform filesystem remounts alongside dynamic tracing modifications, and the failure mode is restricted to a system crash. The issue arises from inadequate lock coverage during remount iterations over tracing event inodes. Furthermore, this code path is not present in Red Hat Enterprise Linux 8 and 9.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.