CVE-2026-53048 Details
Description
In the Linux kernel, the following vulnerability has been resolved: gfs2: prevent NULL pointer dereference during unmount When flushing out outstanding glock work during an unmount, gfs2_log_flush() can be called when sdp->sd_jdesc has already been deallocated and sdp->sd_jdesc is NULL. Commit 35264909e9d1 ("gfs2: Fix NULL pointer dereference in gfs2_log_flush") added a check for that to gfs2_log_flush() itself, but it missed the sdp->sd_jdesc dereference in gfs2_log_release(). Fix that.
A vulnerability in the GFS2 file system of the Linux kernel can lead to a NULL pointer dereference during the unmount process. This issue arises when the function 'gfs2_log_flush()' is called to clear outstanding glock work, but the 'sdp->sd_jdesc' has already been deallocated, leaving it NULL. Although a previous commit added a check in 'gfs2_log_flush()' to prevent this dereference, it overlooked the 'gfs2_log_release()' function. The vulnerability affects several versions of the Linux kernel.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/233a0945a4b1dbe3f38c30afb7d05b76c67f1193 | kernel.org | Patch |
| https://git.kernel.org/stable/c/2fc4c868c9060f424fd4a7cacb0aec5082aba4de | kernel.org | Patch |
| https://git.kernel.org/stable/c/74b4dbb946060a3233604d91859a9abd3708141d | kernel.org | Patch |
| https://git.kernel.org/stable/c/abd73229f0e886a91a16ea781ab656bd9b4d1ee8 | kernel.org | Patch |
| https://git.kernel.org/stable/c/cec55674354794eddb80b914f73a6bf9b7fc304a | kernel.org | Patch |
| https://git.kernel.org/stable/c/d8ffae016c4a78693fe1283335d0b6833a9c1366 | kernel.org | Patch |
| https://git.kernel.org/stable/c/e15f16761594e80b15776980b27c35477655a135 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-476 | NULL Pointer Dereference | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 5.15.200, < 5.15.209 >= 6.1.162, < 6.1.175 >= 6.6.37, < 6.6.141 >= 6.9.8, < 6.12.91 >= 6.13, < 6.18.33 >= 6.19, < 7.0.10 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 21, 2026 | Initial Analysis | [email protected] |
| Jun 24, 2026 | New CVE Received | kernel.org |