CVE-2026-64593

A flaw was found in the btrfs filesystem of the Linux kernel. A local user could trigger a system crash by attempting to perform a trim operation on a storage device that was previously unavailable but has since reconnected and is not writeable. This issue arises from a synchronization problem where the system incorrectly processes the device's state, leading to a critical error (NULL pointer dereference) and causing a Denial of Service (DoS).

This vulnerability is rated as Low severity because triggering the issue requires local access and an uncommon sequence involving a reconnected, non-writable block device within an active Btrfs volume to cause a kernel crash. Btrfs is not supported or configured by default in standard Red Hat Enterprise Linux deployments, limiting the potential exposure in enterprise environments. Furthermore, exploitation only results in a denial of service and cannot lead to data modification or information disclosure.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.