CVE-2026-31577

kernel: nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · June 28, 2026

Description

A flaw was found in the nilfs2 filesystem within the Linux kernel. A local user can trigger a null pointer dereference by calling the NILFS_IOCTL_CLEAN_SEGMENTS operation immediately after mounting the filesystem, but before any btree operations have occurred on the Data Allocation Table (DAT) inode. This can lead to a general protection fault, resulting in a system crash and a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-824 · Access of Uninitialized Pointer