CVE-2026-74365

A flaw was found in the Linux kernel's NVDIMM Block Translation Table (BTT) subsystem. A race condition during BTT lane acquisition, caused by an invalid locking model, allows another task to bypass locking and concurrently use a BTT lane. This can lead to silent data corruption during BTT write operations.

A race in nvdimm BTT lane acquisition can allow two tasks on the same CPU to use the same BTT lane concurrently after lanes became preemptible. The per CPU recursion count can be observed as non zero by another task and that task can bypass locking, which can corrupt per lane metadata or workspace state during BTT write I/O. For the CVSS the PR:L is used because triggering requires local ability to issue writes through a configured BTT namespace or a filesystem backed by that device, but it does not normally require full administrator privileges once write access exists. The issue is not network reachable. Impact is primarily persistent data integrity loss and possible denial of service if corrupted BTT or filesystem metadata makes data unavailable.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.