CVE-2026-63804

A flaw was found in the Linux kernel's GFS2 file system. This use-after-free vulnerability occurs when the gfs2_qd_dealloc function attempts to access memory that has already been released during the unmounting process. This can lead to system instability or crashes, potentially resulting in a denial of service for affected systems.

This vulnerability is rated Moderate because triggering the race condition requires local privileges to unmount file systems, and the impact is confined to a denial of service via a kernel crash rather than code execution or privilege escalation. GFS2 is an optional shared-storage cluster file system that is not loaded or active in default Red Hat Enterprise Linux installations. Standalone deployments and systems that do not configure or mount GFS2 volumes are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.