CVE-2026-31597

kernel: ocfs2: fix use-after-free in ocfs2_fault() when VM_FAULT_RETRY

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · April 24, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's OCFS2 (Oracle Cluster File System version 2) component. A local attacker could exploit a use-after-free vulnerability when filemap_fault() drops the mmap_lock before returning VM_FAULT_RETRY. This allows a concurrent munmap() operation to free a vm_area_struct, leading to ocfs2_fault() dereferencing a dangling pointer. This issue can result in system instability or crashes.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-364 · Signal Handler Race Condition