CVE-2026-46251

A flaw was found in the Linux kernel's Btrfs filesystem. When the EXTENT_TREE_V2 incompatibility flag is enabled, the block group tree's dirty list can become corrupted. This corruption occurs because the block group tree is incorrectly added to a commit list while already being tracked, leading to invalid list operations. This can result in a transaction abort, causing a denial of service (DoS) for the filesystem.

This vulnerability is rated as Moderate severity because exploitation requires local access to mount or manipulate a filesystem configured with the experimental EXTENT_TREE_V2 feature. Btrfs is not the default filesystem in Red Hat Enterprise Linux, significantly reducing exposure under standard system deployments. An aborted transaction triggers a filesystem denial of service by forcing the volume into a read-only state, with no risk of direct privilege escalation or arbitrary code execution. Additionally, earlier enterprise releases including RHEL 8 and RHEL 9 do not contain the vulnerable code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.