CVE-2026-53048

gfs2: prevent NULL pointer dereference during unmount

State: Published
Severity: Not scored
Published: Jun 24, 2026
Updated: Jun 24, 2026
Reserved: Jun 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

gfs2: prevent NULL pointer dereference during unmount

When flushing out outstanding glock work during an unmount, gfs2_log_flush() can be called when sdp->sd_jdesc has already been deallocated and sdp->sd_jdesc is NULL. Commit 35264909e9d1 ("gfs2: Fix NULL pointer dereference in gfs2_log_flush") added a check for that to gfs2_log_flush() itself, but it missed the sdp->sd_jdesc dereference in gfs2_log_release(). Fix that.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	c3c5cfa3170c0940bc66a142859caac07d19b9d6 to before cec55674354794eddb80b914f73a6bf9b7fc304aAffected 5f6a84cfb33b34610623857bd93919dcb661e29b to before 2fc4c868c9060f424fd4a7cacb0aec5082aba4deAffected 3429ef5f50909cee9e498c50f0c499b9397116ce to before 233a0945a4b1dbe3f38c30afb7d05b76c67f1193Affected 35264909e9d1973ab9aaa2a1b07cda70f12bb828 to before e15f16761594e80b15776980b27c35477655a135Affected 35264909e9d1973ab9aaa2a1b07cda70f12bb828 to before d8ffae016c4a78693fe1283335d0b6833a9c1366Affected 35264909e9d1973ab9aaa2a1b07cda70f12bb828 to before abd73229f0e886a91a16ea781ab656bd9b4d1ee8Affected 35264909e9d1973ab9aaa2a1b07cda70f12bb828 to before 74b4dbb946060a3233604d91859a9abd3708141dAffected f54f9d5368a4e92ede7dd078a62788dae3a7c6efAffected 5.15.200 to before 5.15.209Affected 6.1.162 to before 6.1.175Affected 6.6.37 to before 6.6.141Affected 6.9.8 to before 6.10Affected
LinuxLinux	6.10Affected before 6.10Not affected 5.15.209 through 5.15.Not affected 6.1.175 through 6.1.Not affected 6.6.141 through 6.6.Not affected 6.12.91 through 6.12.Not affected 6.18.33 through 6.18.Not affected 7.0.10 through 7.0.Not affected 7.1 and laterNot affected

Product

Versions

LinuxLinux

c3c5cfa3170c0940bc66a142859caac07d19b9d6 to before cec55674354794eddb80b914f73a6bf9b7fc304aAffected
5f6a84cfb33b34610623857bd93919dcb661e29b to before 2fc4c868c9060f424fd4a7cacb0aec5082aba4deAffected
3429ef5f50909cee9e498c50f0c499b9397116ce to before 233a0945a4b1dbe3f38c30afb7d05b76c67f1193Affected
35264909e9d1973ab9aaa2a1b07cda70f12bb828 to before e15f16761594e80b15776980b27c35477655a135Affected
35264909e9d1973ab9aaa2a1b07cda70f12bb828 to before d8ffae016c4a78693fe1283335d0b6833a9c1366Affected
35264909e9d1973ab9aaa2a1b07cda70f12bb828 to before abd73229f0e886a91a16ea781ab656bd9b4d1ee8Affected
35264909e9d1973ab9aaa2a1b07cda70f12bb828 to before 74b4dbb946060a3233604d91859a9abd3708141dAffected
f54f9d5368a4e92ede7dd078a62788dae3a7c6efAffected
5.15.200 to before 5.15.209Affected
6.1.162 to before 6.1.175Affected
6.6.37 to before 6.6.141Affected
6.9.8 to before 6.10Affected

LinuxLinux

6.10Affected
before 6.10Not affected
5.15.209 through 5.15.*Not affected
6.1.175 through 6.1.*Not affected
6.6.141 through 6.6.*Not affected
6.12.91 through 6.12.*Not affected
6.18.33 through 6.18.*Not affected
7.0.10 through 7.0.*Not affected
7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.