CVE-2026-80697

A flaw was found in the Linux kernel's erofs filesystem. An invalid f_path for page cache sharing could lead to a null pointer dereference when a mincore operation is performed. This vulnerability could allow a local attacker to cause a system crash, resulting in a Denial of Service (DoS).

A moderate-impact flaw was found in the Linux kernel's erofs filesystem. When erofs page cache sharing was in use, the internal backing files were set up with a NULL f_path, while only f_inode was valid. A subsequent mincore() operation on such a file dereferences f_path.mnt, triggering a kernel NULL pointer dereference that crashes the system. A local attacker able to run code on a system using erofs with page cache sharing enabled could exploit this flaw to cause a kernel panic, resulting in a denial of service (availability impact only; no impact on confidentiality or integrity). Red Hat rates this flaw Moderate severity (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H, score 5.5). Red Hat Enterprise Linux and Red Hat In-Vehicle OS kernel and kernel-rt are not affected by this flaw because the vulnerable code is not present in the shipped kernel versions.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.