CVE-2026-31455
kernel: xfs: stop reclaim before pushing AIL during unmount
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 22, 2026
Updated · October 30, 2026
Description
A flaw was found in the Linux kernel's XFS file system. During the unmount process, the system attempts to flush data while background cleanup and inode garbage collection (inodegc) operations are still active. This improper synchronization can lead to data integrity issues or system instability, as critical file system operations may conflict.
Statement
This vulnerability is rated with a Moderate severity for Red Hat because triggering the flaw requires local interaction during administrative filesystem teardown, restricting the overall blast radius to a localized denial of service or filesystem inconsistency. While XFS is the default root filesystem on modern Red Hat Enterprise Linux releases, unmounting active filesystems typically requires administrative privileges. An unprivileged local attacker cannot independently unmount storage volumes, making exploitation depend on concurrent background activity coinciding with privileged administrative actions.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-366 · Race Condition within a Thread