CVE-2026-31715

kernel: f2fs: fix UAF caused by decrementing sbi->nr_pages[] in f2fs_write_end_io()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 1, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel's Flash-Friendly File System (f2fs). A use-after-free vulnerability exists due to incorrect handling of page counts during concurrent write operations and unmounting. This can lead to a NULL pointer dereference, causing the system to panic and resulting in a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference