Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-31577

nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map The DAT inode's btree node cache (i_assoc_inode) is initialized lazily during btree operations. However, nilfs_mdt_save_to_shadow_map() assumes i_assoc_inode is already initialized when copying dirty pages to the shadow map during GC. If NILFS_IOCTL_CLEAN_SEGMENTS is called immediately after mount before any btree operation has occurred on the DAT inode, i_assoc_inode is NULL leading to a general protection fault. Fix this by calling nilfs_attach_btree_node_cache() on the DAT inode in nilfs_dat_read() at mount time, ensuring i_assoc_inode is always initialized before any GC operation can use it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d626fcdabea2258be395a775bdbe09270e9bf73d to < 6637bbcfb59df5b732a79e5ab1a74886a0b93d59affected
  • d05cc5395e36711edad8bdef6945f138d8a7097b to < 837c7a59fb58f81b0db33848357f6a5d0d1250adaffected
  • e897be17a441fa637cd166fc3de1445131e57692 to < 7902b1df1520a0880bcda7a3704cfacd17905a83affected
  • e897be17a441fa637cd166fc3de1445131e57692 to < 7318e3549518ce8f14776a489d86488d80d7e2c8affected
  • e897be17a441fa637cd166fc3de1445131e57692 to < 449ec5fc99f45974525ba9eea16b6670c45cd363affected
  • e897be17a441fa637cd166fc3de1445131e57692 to < c36e206f302f1ddefed92d09ecbba070e1ae079eaffected
  • e897be17a441fa637cd166fc3de1445131e57692 to < 41de342278ae025c99cc8d33648773f05e306cf1affected
  • e897be17a441fa637cd166fc3de1445131e57692 to < 97fb7afec404912d967a7d4715f37742666b3084affected
  • e897be17a441fa637cd166fc3de1445131e57692 to < 4a4e0328edd9e9755843787d28f16dd4165f8b48affected
  • 6c3da8c0a35bbafe359d9166269d5590f29664deaffected
  • 605babb979c213737618b1c837e89624e5ab11fdaffected
  • 307d021b1a7f33048b624f7aaeaa75e3eae571f1affected
  • 1829b24a36ca12ca95b96d5478faeff40c17f2b6affected
  • 5.10.118 to < 5.10.258affected
  • 5.15.42 to < 5.15.209affected
  • 4.14.296 to < 4.15affected
  • 4.19.245 to < 4.20affected
  • 5.4.196 to < 5.5affected
  • 5.17.10 to < 5.18affected

Linux Linux

Default version status: affected

  • 5.18affected
  • 0 to < 5.18unaffected
  • 5.10.258 to ≤ 5.10.*unaffected
  • 5.15.209 to ≤ 5.15.*unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.136 to ≤ 6.6.*unaffected
  • 6.12.83 to ≤ 6.12.*unaffected
  • 6.18.24 to ≤ 6.18.*unaffected
  • 6.19.14 to ≤ 6.19.*unaffected
  • 7.0.1 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References