CVE-2026-89723

A flaw was found in the nilfs2 file system component of the Linux kernel. When a file is truncated, an intermediate node block is not properly deleted and remains in the B-tree node cache. This can lead to the log writer incorrectly processing the block, resulting in a slab-out-of-bounds memory access. A local attacker could potentially use this to cause memory corruption, leading to system instability or a denial of service.

Red Hat has evaluated this vulnerability as having a Moderate severity because exploitation requires local access and write privileges on an actively mounted NILFS2 volume, restricting the blast radius primarily to a local denial of service. The NILFS2 file system is not configured or utilized by default in standard enterprise deployments. Consequently, systems running typical configurations without mounted NILFS2 partitions remain unexposed to this issue.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.