Denial of Service Vulnerability in Linux Kernel OCFS2 by Vendor Oracle

CVE-2026-46080

What is CVE-2026-46080?

A vulnerability has been identified within the OCFS2 file system of the Linux kernel that potentially allows for Denial of Service due to excessive credit usage during Direct I/O (DIO) operations. Specifically, the issue arises when JBD2 reports warnings regarding credit exhaustion, which can lead to operational disruptions. The anomaly occurs during multiple extent handling in transactions, leading to system instability if the maximum credits are surpassed. To rectify this, modifications have been proposed to manage extents in batches, thus maintaining operations within credit limits and ensuring the integrity of inode updates during operations. This fix enhances reliability and stability in OCFS2 file system transactions.

References