CVE-2026-46080

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-46080", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-05-13T15:03:33.096Z", "datePublished": "2026-05-27T12:58:17.103Z", "dateUpdated": "2026-11-06T16:13:36.222Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-14T17:52:50.929Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: split transactions in dio completion to avoid credit exhaustion\n\nDuring ocfs2 dio operations, JBD2 may report warnings via following\ncall trace:\nocfs2_dio_end_io_write\n ocfs2_mark_extent_written\n ocfs2_change_extent_flag\n ocfs2_split_extent\n ocfs2_try_to_merge_extent\n ocfs2_extend_rotate_transaction\n ocfs2_extend_trans\n jbd2__journal_restart\n start_this_handle\n output: JBD2: kworker/6:2 wants too many credits credits:5450 rsv_credits:0 max:5449\n\nTo prevent exceeding the credits limit, modify ocfs2_dio_end_io_write() to\nhandle extents in a batch of transaction.\n\nAdditionally, relocate ocfs2_del_inode_from_orphan(). The orphan inode\nshould only be removed from the orphan list after the extent tree update\nis complete. This ensures that if a crash occurs in the middle of extent\ntree updates, we won't leave stale blocks beyond EOF.\n\nThis patch also changes the logic for updating the inode size and removing\norphan, making it similar to ext4_dio_write_end_io(). Both operations are\nperformed only when everything looks good.\n\nFinally, thanks to Jans and Joseph for providing the bug fix prototype and\nsuggestions."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ocfs2/aops.c"], "versions": [{"version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "97c03c0e9f73a5049794b3c69ee60fb5e8b0ebd8", "status": "affected", "versionType": "git"}, {"version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "1e99bb19994246514d63e656492904176f9d5edd", "status": "affected", "versionType": "git"}, {"version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "91e05ac2336d00d5b99fc774be4bd50039084796", "status": "affected", "versionType": "git"}, {"version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "886f97fa59d0bbfa9859fb1a66dd9e014b522d89", "status": "affected", "versionType": "git"}, {"version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "ea5bb1d20da756e4f41a48dad42b2e7d6e73f71e", "status": "affected", "versionType": "git"}, {"version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "3c636a3edca9c3f180b3079f94fe7e115730d9c6", "status": "affected", "versionType": "git"}, {"version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "069c3fb310e9336cf48cfdf8748a32c29fd0193d", "status": "affected", "versionType": "git"}, {"version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "d647c5b2fbf81560818dacade360abc8c00a9665", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ocfs2/aops.c"], "versions": [{"version": "4.6", "status": "affected"}, {"version": "0", "lessThan": "4.6", "status": "unaffected", "versionType": "semver"}, {"version": "5.10.258", "lessThanOrEqual": "5.10.*", "status": "unaffected", "versionType": "semver"}, {"version": "5.15.209", "lessThanOrEqual": "5.15.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.1.175", "lessThanOrEqual": "6.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.140", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.86", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.27", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.0.4", "lessThanOrEqual": "7.0.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "5.10.258"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "5.15.209"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "6.1.175"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "6.6.140"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "6.12.86"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "6.18.27"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "7.0.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "4.6", "versionEndExcluding": "7.1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/97c03c0e9f73a5049794b3c69ee60fb5e8b0ebd8"}, {"url": "https://git.kernel.org/stable/c/1e99bb19994246514d63e656492904176f9d5edd"}, {"url": "https://git.kernel.org/stable/c/91e05ac2336d00d5b99fc774be4bd50039084796"}, {"url": "https://git.kernel.org/stable/c/886f97fa59d0bbfa9859fb1a66dd9e014b522d89"}, {"url": "https://git.kernel.org/stable/c/ea5bb1d20da756e4f41a48dad42b2e7d6e73f71e"}, {"url": "https://git.kernel.org/stable/c/3c636a3edca9c3f180b3079f94fe7e115730d9c6"}, {"url": "https://git.kernel.org/stable/c/069c3fb310e9336cf48cfdf8748a32c29fd0193d"}, {"url": "https://git.kernel.org/stable/c/d647c5b2fbf81560818dacade360abc8c00a9665"}], "title": "ocfs2: split transactions in dio completion to avoid credit exhaustion", "x_generator": {"engine": "bippy-1.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-46080", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:07:30.924563Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:13:36.222Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-46080", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-11-06T16:07:30.924563Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-11-06T16:07:32.002Z"}}], "cna": {"title": "ocfs2: split transactions in dio completion to avoid credit exhaustion", "affected": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "97c03c0e9f73a5049794b3c69ee60fb5e8b0ebd8", "versionType": "git"}, {"status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "1e99bb19994246514d63e656492904176f9d5edd", "versionType": "git"}, {"status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "91e05ac2336d00d5b99fc774be4bd50039084796", "versionType": "git"}, {"status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "886f97fa59d0bbfa9859fb1a66dd9e014b522d89", "versionType": "git"}, {"status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "ea5bb1d20da756e4f41a48dad42b2e7d6e73f71e", "versionType": "git"}, {"status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "3c636a3edca9c3f180b3079f94fe7e115730d9c6", "versionType": "git"}, {"status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "069c3fb310e9336cf48cfdf8748a32c29fd0193d", "versionType": "git"}, {"status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "lessThan": "d647c5b2fbf81560818dacade360abc8c00a9665", "versionType": "git"}], "programFiles": ["fs/ocfs2/aops.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.6"}, {"status": "unaffected", "version": "0", "lessThan": "4.6", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.258", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.209", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.175", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.140", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.86", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.27", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.0.4", "versionType": "semver", "lessThanOrEqual": "7.0.*"}, {"status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/ocfs2/aops.c"], "defaultStatus": "affected"}], "references": [{"url": "https://git.kernel.org/stable/c/97c03c0e9f73a5049794b3c69ee60fb5e8b0ebd8"}, {"url": "https://git.kernel.org/stable/c/1e99bb19994246514d63e656492904176f9d5edd"}, {"url": "https://git.kernel.org/stable/c/91e05ac2336d00d5b99fc774be4bd50039084796"}, {"url": "https://git.kernel.org/stable/c/886f97fa59d0bbfa9859fb1a66dd9e014b522d89"}, {"url": "https://git.kernel.org/stable/c/ea5bb1d20da756e4f41a48dad42b2e7d6e73f71e"}, {"url": "https://git.kernel.org/stable/c/3c636a3edca9c3f180b3079f94fe7e115730d9c6"}, {"url": "https://git.kernel.org/stable/c/069c3fb310e9336cf48cfdf8748a32c29fd0193d"}, {"url": "https://git.kernel.org/stable/c/d647c5b2fbf81560818dacade360abc8c00a9665"}], "x_generator": {"engine": "bippy-1.2.0"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: split transactions in dio completion to avoid credit exhaustion\n\nDuring ocfs2 dio operations, JBD2 may report warnings via following\ncall trace:\nocfs2_dio_end_io_write\n ocfs2_mark_extent_written\n ocfs2_change_extent_flag\n ocfs2_split_extent\n ocfs2_try_to_merge_extent\n ocfs2_extend_rotate_transaction\n ocfs2_extend_trans\n jbd2__journal_restart\n start_this_handle\n output: JBD2: kworker/6:2 wants too many credits credits:5450 rsv_credits:0 max:5449\n\nTo prevent exceeding the credits limit, modify ocfs2_dio_end_io_write() to\nhandle extents in a batch of transaction.\n\nAdditionally, relocate ocfs2_del_inode_from_orphan(). The orphan inode\nshould only be removed from the orphan list after the extent tree update\nis complete. This ensures that if a crash occurs in the middle of extent\ntree updates, we won't leave stale blocks beyond EOF.\n\nThis patch also changes the logic for updating the inode size and removing\norphan, making it similar to ext4_dio_write_end_io(). Both operations are\nperformed only when everything looks good.\n\nFinally, thanks to Jans and Joseph for providing the bug fix prototype and\nsuggestions."}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.10.258", "versionStartIncluding": "4.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "5.15.209", "versionStartIncluding": "4.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.1.175", "versionStartIncluding": "4.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.6.140", "versionStartIncluding": "4.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.12.86", "versionStartIncluding": "4.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "6.18.27", "versionStartIncluding": "4.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.0.4", "versionStartIncluding": "4.6"}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndExcluding": "7.1", "versionStartIncluding": "4.6"}], "operator": "OR"}]}], "providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-06-14T17:52:50.929Z"}}}, "cveMetadata": {"cveId": "CVE-2026-46080", "state": "PUBLISHED", "dateUpdated": "2026-11-06T16:13:36.222Z", "dateReserved": "2026-05-13T15:03:33.096Z", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "datePublished": "2026-05-27T12:58:17.103Z", "assignerShortName": "Linux"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/ocfs2/aops.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "97c03c0e9f73a5049794b3c69ee60fb5e8b0ebd8", "status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "versionType": "git"}, {"lessThan": "1e99bb19994246514d63e656492904176f9d5edd", "status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "versionType": "git"}, {"lessThan": "91e05ac2336d00d5b99fc774be4bd50039084796", "status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "versionType": "git"}, {"lessThan": "886f97fa59d0bbfa9859fb1a66dd9e014b522d89", "status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "versionType": "git"}, {"lessThan": "ea5bb1d20da756e4f41a48dad42b2e7d6e73f71e", "status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "versionType": "git"}, {"lessThan": "3c636a3edca9c3f180b3079f94fe7e115730d9c6", "status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "versionType": "git"}, {"lessThan": "069c3fb310e9336cf48cfdf8748a32c29fd0193d", "status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "versionType": "git"}, {"lessThan": "d647c5b2fbf81560818dacade360abc8c00a9665", "status": "affected", "version": "c15471f79506830f80eca0e7fe09b8213953ab5f", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/ocfs2/aops.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "4.6"}, {"lessThan": "4.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "5.10.*", "status": "unaffected", "version": "5.10.258", "versionType": "semver"}, {"lessThanOrEqual": "5.15.*", "status": "unaffected", "version": "5.15.209", "versionType": "semver"}, {"lessThanOrEqual": "6.1.*", "status": "unaffected", "version": "6.1.175", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.140", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.86", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.27", "versionType": "semver"}, {"lessThanOrEqual": "7.0.*", "status": "unaffected", "version": "7.0.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "F08826DB-DB76-43B9-BFA4-A6D435FCC364", "versionEndExcluding": "5.10.258", "versionStartIncluding": "4.6", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "919C10A9-7951-4A74-BADD-C135A0A8D8B4", "versionEndExcluding": "5.15.209", "versionStartIncluding": "5.11", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "92385813-D91D-480D-83A1-F423D2CBB2BA", "versionEndExcluding": "6.1.175", "versionStartIncluding": "5.16", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A1A92866-F406-43B5-B2D1-CFC274753E9D", "versionEndExcluding": "6.6.140", "versionStartIncluding": "6.2", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "55DA1C62-9991-451E-B8A8-E0004E00F789", "versionEndExcluding": "6.12.86", "versionStartIncluding": "6.7", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "A10AC84F-C058-47D5-85B4-E6E51A613B74", "versionEndExcluding": "6.18.27", "versionStartIncluding": "6.13", "vulnerable": true}, {"criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "matchCriteriaId": "CDB78D6D-22C3-4154-B0D0-94AF1CE5C2E3", "versionEndExcluding": "7.0.4", "versionStartIncluding": "6.19", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nocfs2: split transactions in dio completion to avoid credit exhaustion\n\nDuring ocfs2 dio operations, JBD2 may report warnings via following\ncall trace:\nocfs2_dio_end_io_write\n ocfs2_mark_extent_written\n ocfs2_change_extent_flag\n ocfs2_split_extent\n ocfs2_try_to_merge_extent\n ocfs2_extend_rotate_transaction\n ocfs2_extend_trans\n jbd2__journal_restart\n start_this_handle\n output: JBD2: kworker/6:2 wants too many credits credits:5450 rsv_credits:0 max:5449\n\nTo prevent exceeding the credits limit, modify ocfs2_dio_end_io_write() to\nhandle extents in a batch of transaction.\n\nAdditionally, relocate ocfs2_del_inode_from_orphan(). The orphan inode\nshould only be removed from the orphan list after the extent tree update\nis complete. This ensures that if a crash occurs in the middle of extent\ntree updates, we won't leave stale blocks beyond EOF.\n\nThis patch also changes the logic for updating the inode size and removing\norphan, making it similar to ext4_dio_write_end_io(). Both operations are\nperformed only when everything looks good.\n\nFinally, thanks to Jans and Joseph for providing the bug fix prototype and\nsuggestions."}], "id": "CVE-2026-46080", "lastModified": "2026-11-06T17:17:35.320", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-46080", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-11-06T16:07:30.924563Z", "version": "2.0.3"}}]}, "published": "2026-05-27T14:17:29.397", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/069c3fb310e9336cf48cfdf8748a32c29fd0193d"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/1e99bb19994246514d63e656492904176f9d5edd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/3c636a3edca9c3f180b3079f94fe7e115730d9c6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/886f97fa59d0bbfa9859fb1a66dd9e014b522d89"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/91e05ac2336d00d5b99fc774be4bd50039084796"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/97c03c0e9f73a5049794b3c69ee60fb5e8b0ebd8"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/d647c5b2fbf81560818dacade360abc8c00a9665"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "tags": ["Patch"], "url": "https://git.kernel.org/stable/c/ea5bb1d20da756e4f41a48dad42b2e7d6e73f71e"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Undergoing Analysis", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"bugzilla": {"description": "kernel: ocfs2: split transactions in dio completion to avoid credit exhaustion", "id": "2481928", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481928"}, "csaw": false, "cwe": "CWE-770", "details": ["A flaw was found in the Linux kernel's Oracle Cluster File System 2 (ocfs2) component. During direct I/O (DIO) write operations, specifically in the `ocfs2_dio_end_io_write` function, an issue with transaction splitting can lead to credit exhaustion in the Journaling Block Device 2 (JBD2) subsystem. This can be exploited by a local attacker to cause a denial of service (DoS) by preventing further journaling operations."], "name": "CVE-2026-46080", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-05-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-46080\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-46080\nhttps://lore.kernel.org/linux-cve-announce/2026052700-CVE-2026-46080-bbd7@gregkh/T"]}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,886f97fa59d0bbfa9859fb1a66dd9e014b522d89)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,ea5bb1d20da756e4f41a48dad42b2e7d6e73f71e)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,3c636a3edca9c3f180b3079f94fe7e115730d9c6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,069c3fb310e9336cf48cfdf8748a32c29fd0193d)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[1da177e4c3f41524e886b7f1b8a0c1fc7321cac2,d647c5b2fbf81560818dacade360abc8c00a9665)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,6.6.140)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,6.12.86)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,6.18.27)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,7.0.4)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.6.140,6.7.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.86,6.13.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.27,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.0.4,7.1.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.1-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-05-27T20:15:16.211309+00:00", "updated": "2026-08-12T04:15:07.013669+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-400", "CWE-770"]}