CVE Database›Document archive›CVE-2026-31702

CVE-2026-31702

kernel: f2fs: fix use-after-free of sbi in f2fs_compress_write_end_io()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's F2FS (Flash-Friendly File System) component. A use-after-free vulnerability exists in the f2fs_compress_write_end_io() function. This flaw is caused by a race condition during the compressed writeback completion path, where the system attempts to access memory that has already been deallocated. A local attacker could potentially exploit this to cause a system crash, leading to a denial of service.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference