CVE-2026-53165

kernel: iomap: avoid potential null folio->mapping deref during error reporting

Loading…

Severity

Moderate

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · June 25, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's iomap subsystem. A race condition can occur during buffered read error reporting, specifically in the iomap_finish_folio_read() function. This allows a separate process to clear a folio's mapping while an error is being reported, leading to a null pointer dereference. This vulnerability can result in a system crash, causing a Denial of Service (DoS).

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-476 · NULL Pointer Dereference