CVE-2026-97549

A flaw was found in the Linux kernel's XFS file system. An incorrect block calculation during the online repair of shortform directories and extended attributes causes transaction space to be under-reserved. A local user capable of triggering metadata repair operations can exploit this flaw to cause an assertion failure or filesystem shutdown, leading to a Denial of Service (DoS).

A low severity denial of service flaw was found in the XFS file system code of the Linux kernel as shipped in Red Hat products. When the XFS online repair code converts a shortform directory or extended attribute structure to block form on a filesystem whose directory block spans multiple filesystem blocks, it incorrectly assumes that only a single filesystem block is required and under-reserves transaction space. A local user able to invoke XFS online metadata repair operations (for example through xfs_scrub) on such a filesystem can trigger an assertion failure or a filesystem shutdown, resulting in a denial of service. The flaw does not lead to information disclosure, data corruption, or privilege escalation.

The Red Hat Enterprise Linux 9 kernel (streams 9.8 and later) and Red Hat Enterprise Linux 10 kernel, Red Hat In-Vehicle OS 2, and the RHEL 9 CoreOS-based OpenShift Container Platform 4.22, 4.23, 5.0, and 5.1 streams are affected. Fixes for these streams are deferred because the flaw is rated low impact and triggering it requires privileged local access together with an XFS filesystem whose directory block size differs from its filesystem block size; the residual risk is limited to a locally induced assertion failure or filesystem shutdown. Earlier Red Hat Enterprise Linux 6, 7, and 8 releases and earlier Red Hat Enterprise Linux 9 streams are not affected because the vulnerable code is not present.

Although the Red Hat CVSS 3.1 base score for this flaw is 5.5 (moderate), Red Hat rates the overall impact as low because exploitation requires local access and the ability to invoke privileged XFS online repair operations on a filesystem with a specific geometry, and the consequence is confined to availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.