CVE-2026-31453

A flaw was found in the Linux kernel's XFS filesystem. This vulnerability arises when log items are accessed after their memory has been freed, specifically during certain push callbacks if the Allocation Information List (AIL) lock is released. This memory corruption can lead to a system crash, resulting in a Denial of Service (DoS).

Upstream adjusted XFS AIL push tracing to avoid dereferencing freed log items after iop_push() drops the lock. Red Hat categorizes the issue as local kernel memory safety in XFS journaling paths. Customers running XFS should plan for patched kernels from their product stream. Mitigation is limited to avoiding the driver where policy allows.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this issue, prevent the xfs module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.