CVE-2026-72161

A flaw was found in the ocfs2 component of the Linux kernel. A local user could trigger a NULL pointer dereference during the unmount process of an ocfs2 filesystem. This occurs because the system attempts to access a freed journal pointer, leading to a system crash and a Denial of Service (DoS).

This vulnerability is evaluated with a Moderate severity rating because exploitation requires local access and is restricted to causing a kernel crash, lacking any integrity or confidentiality impact. Red Hat Enterprise Linux is not affected by this flaw, as the vulnerable upstream filesystem code is not present in supported enterprise kernel packages.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.