CVE-2026-53048
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk7th percentile - higher than 7% of all known CVEs
Summary
In the GFS2 filesystem of the Linux kernel, a NULL pointer dereference can occur in gfs2_log_release() during unmount when sdp->sd_jdesc is NULL. The previous patch missed this case.
Risk Assessment
During GFS2 unmount, a kernel panic may occur, leading to data unavailability and potential filesystem corruption.
Recommendation
Update the Linux kernel to a version containing the fix for CVE-2026-53048.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: gfs2: prevent NULL pointer dereference during unmount When flushing out outstanding glock work during an unmount, gfs2_log_flush() can be called when sdp->sd_jdesc has already been deallocated and sdp->sd_jdesc is NULL. Commit 35264909e9d1 ("gfs2: Fix NULL pointer dereference in gfs2_log_flush") added a check for that to gfs2_log_flush() itself, but it missed the sdp->sd_jdesc dereference in gfs2_log_release(). Fix that.