CVE-2026-31702
kernel: f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · May 1, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel's F2FS (Flash-Friendly File System) component. A use-after-free vulnerability exists in the f2fs_compress_write_end_io() function. This flaw is caused by a race condition during the compressed writeback completion path, where the system attempts to access memory that has already been deallocated. A local attacker could potentially exploit this to cause a system crash, leading to a denial of service.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-825 · Expired Pointer Dereference