CVE-2026-98444

A flaw was found in the Linux kernel's XFS file system. When flushing disk quota records, the kernel fails to release the quota flush lock if an associated buffer cannot be retrieved. A local user could trigger this condition to cause a system deadlock, resulting in a Denial of Service (DoS).

This vulnerability is rated as having Moderate impact for Red Hat Enterprise Linux because, while it can cause a kernel deadlock leading to denial of service, exploitation requires local system access under constrained failure conditions with no breach of data integrity or confidentiality. Although XFS is the default filesystem on standard Red Hat deployments, encountering the unreleased quota lock condition depends on specific internal buffer handling failures during quota synchronization. Consequently, the flaw cannot be leveraged for privilege escalation or arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.