CVE Database›CVE-2026-31455

CVE-2026-31455

kernel: xfs: stop reclaim before pushing AIL during unmount

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · April 22, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's XFS file system. During the unmount process, the system attempts to flush data while background cleanup and inode garbage collection (inodegc) operations are still active. This improper synchronization can lead to data integrity issues or system instability, as critical file system operations may conflict.

Statement

This vulnerability is rated with a Moderate severity for Red Hat because triggering the flaw requires local interaction during administrative filesystem teardown, restricting the overall blast radius to a localized denial of service or filesystem inconsistency. While XFS is the default root filesystem on modern Red Hat Enterprise Linux releases, unmounting active filesystems typically requires administrative privileges. An unprivileged local attacker cannot independently unmount storage volumes, making exploitation depend on concurrent background activity coinciding with privileged administrative actions.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-366 · Race Condition within a Thread