CVE-2026-74343

A flaw was found in the Linux kernel's kernfs component. Multiple superblocks with different namespaces can share the same kernfs_node, leading to a race condition during extended attribute (xattr) operations. The Virtual File System (VFS) layer's per-inode locks are insufficient to serialize concurrent xattr modifications on the shared kernfs_node. This can result in non-atomic operations, potentially leading to unexpected behavior or data inconsistency.

This vulnerability is evaluated with a Moderate severity because exploitation requires local privileges to race extended attribute operations across separate namespaces, potentially leading to kernel instability or system denial of service. The underlying code changes responsible for this race condition are absent from the kernels shipped across Red Hat Enterprise Linux product lines. As a result, standard Red Hat enterprise environments remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.