CVE-2026-98118

A flaw was found in the Linux kernel's netfs (network filesystem) subsystem. A local user could exploit a race condition during readahead operations to cause a Denial of Service (DoS) via a system crash. This issue stems from improper synchronization between the application thread and collector thread when concurrently manipulating memory pages in the rolling buffer.

A moderate-impact flaw was found in the Linux kernel's netfs (network filesystem) subsystem in Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS 2. During readahead operations, the application thread progressively adds folios to a rolling buffer while the collector thread inspects and clears those folios, and the missing synchronization between these threads allows a local user to trigger a race condition that can crash the kernel and cause a denial of service. Red Hat Enterprise Linux 6, 7, 8, and 9, and the OpenShift Container Platform RHEL CoreOS images, are not affected because the vulnerable code is not present in those kernels. For the affected Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS 2 kernel streams the fix is currently deferred to a future update, so the residual risk remains that a local user with read access to a netfs-based filesystem mount could win the race and trigger a system crash. Red Hat rated this flaw as Moderate severity with a CVSS 3.1 score of 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.