CVE-2026-31577

Advisory lineage Upstream: 0 Downstream: 3
Modified
Published: 24 Apr 2026, 14:42
Last modified:01 Jun 2026, 16:11

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
v3.1 (nvd)
EPSS Score
0.01% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

24 Apr 2026, 14:42
Published
Vulnerability first disclosed
01 Jun 2026, 16:11
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map The DAT inode's btree node cache (i_assoc_inode) is initialized lazily during btree operations. However, nilfs_mdt_save_to_shadow_map() assumes i_assoc_inode is already initialized when copying dirty pages to the shadow map during GC. If NILFS_IOCTL_CLEAN_SEGMENTS is called immediately after mount before any btree operation has occurred on the DAT inode, i_assoc_inode is NULL leading to a general protection fault. Fix this by calling nilfs_attach_btree_node_cache() on the DAT inode in nilfs_dat_read() at mount time, ensuring i_assoc_inode is always initialized before any GC operation can use it.

CVSS Metrics

  • v3.1•MEDIUM•Score: 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 0.01%• Percentile: 3%

Techniques & Countermeasures

  • CWE-476•NULL Pointer Dereference

    The product dereferences a pointer that it expects to be valid but is NULL.

Affected Systems

  • linux•linux

    ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 449ec5fc99f45974525ba9eea16b6670c45cd363 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < c36e206f302f1ddefed92d09ecbba070e1ae079e | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 41de342278ae025c99cc8d33648773f05e306cf1 | ≥ 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2, < 97fb7afec404912d967a7d4715f37742666b3084 | d626fcdabea2258be395a775bdbe09270e9bf73d | d05cc5395e36711edad8bdef6945f138d8a7097b | ≥ 5.10.118, < 5.11 | ≥ 5.15.42, < 5.16 | ≥ d626fcdabea2258be395a775bdbe09270e9bf73d, < 6637bbcfb59df5b732a79e5ab1a74886a0b93d59 | ≥ d05cc5395e36711edad8bdef6945f138d8a7097b, < 837c7a59fb58f81b0db33848357f6a5d0d1250ad | ≥ e897be17a441fa637cd166fc3de1445131e57692, < 7902b1df1520a0880bcda7a3704cfacd17905a83 | ≥ e897be17a441fa637cd166fc3de1445131e57692, < 7318e3549518ce8f14776a489d86488d80d7e2c8 | ≥ e897be17a441fa637cd166fc3de1445131e57692, < 449ec5fc99f45974525ba9eea16b6670c45cd363 | ≥ e897be17a441fa637cd166fc3de1445131e57692, < c36e206f302f1ddefed92d09ecbba070e1ae079e | ≥ e897be17a441fa637cd166fc3de1445131e57692, < 41de342278ae025c99cc8d33648773f05e306cf1 | ≥ e897be17a441fa637cd166fc3de1445131e57692, < 97fb7afec404912d967a7d4715f37742666b3084 | ≥ e897be17a441fa637cd166fc3de1445131e57692, < 4a4e0328edd9e9755843787d28f16dd4165f8b48 | 6c3da8c0a35bbafe359d9166269d5590f29664de | 605babb979c213737618b1c837e89624e5ab11fd | 307d021b1a7f33048b624f7aaeaa75e3eae571f1 | 1829b24a36ca12ca95b96d5478faeff40c17f2b6 | ≥ 5.10.118, < 5.10.258 | ≥ 5.15.42, < 5.15.209 | ≥ 4.14.296, < 4.15 | ≥ 4.19.245, < 4.20 | ≥ 5.4.196, < 5.5 | ≥ 5.17.10, < 5.18 | 5.18

  • linux•linux_kernel

    < 6.6.136 | ≥ 6.7, < 6.12.83 | ≥ 6.13, < 6.18.24 | ≥ 6.19, < 6.19.14 | ≥ 7.0, < 7.0.1

References (9)