5.5

CVE-2026-31577

nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

In the Linux kernel, the following vulnerability has been resolved:

nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

The DAT inode's btree node cache (i_assoc_inode) is initialized lazily
during btree operations. However, nilfs_mdt_save_to_shadow_map()
assumes i_assoc_inode is already initialized when copying dirty pages
to the shadow map during GC.

If NILFS_IOCTL_CLEAN_SEGMENTS is called immediately after mount before
any btree operation has occurred on the DAT inode, i_assoc_inode is
NULL leading to a general protection fault.

Fix this by calling nilfs_attach_btree_node_cache() on the DAT inode
in nilfs_dat_read() at mount time, ensuring i_assoc_inode is always
initialized before any GC operation can use it.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
LinuxLinux Kernel Version < 6.6.136
LinuxLinux Kernel Version >= 6.7 < 6.12.83
LinuxLinux Kernel Version >= 6.13 < 6.18.24
LinuxLinux Kernel Version >= 6.19 < 6.19.14
LinuxLinux Kernel Version >= 7.0 < 7.0.1
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.025
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/449ec5fc99f45974525ba9eea16b6670c45cd363
Patch
https://git.kernel.org/stable/c/c36e206f302f1ddefed92d09ecbba070e1ae079e
Patch
https://git.kernel.org/stable/c/41de342278ae025c99cc8d33648773f05e306cf1
Patch
https://git.kernel.org/stable/c/97fb7afec404912d967a7d4715f37742666b3084
Patch
https://git.kernel.org/stable/c/4a4e0328edd9e9755843787d28f16dd4165f8b48
Patch
https://git.kernel.org/stable/c/7318e3549518ce8f14776a489d86488d80d7e2c8
Patch
https://git.kernel.org/stable/c/6637bbcfb59df5b732a79e5ab1a74886a0b93d59
https://git.kernel.org/stable/c/7902b1df1520a0880bcda7a3704cfacd17905a83
https://git.kernel.org/stable/c/837c7a59fb58f81b0db33848357f6a5d0d1250ad