{"id":"CVE-2026-53048","title":"gfs2: prevent NULL pointer dereference during unmount","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: prevent NULL pointer dereference during unmount\n\nWhen flushing out outstanding glock work during an unmount, gfs2_log_flush()\ncan be called when sdp->sd_jdesc has…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= c3c5cfa3170c0940bc66a142859caac07d19b9d6 < cec55674354794eddb80b914f73a6bf9b7fc304a","Linux >= 5f6a84cfb33b34610623857bd93919dcb661e29b < 2fc4c868c9060f424fd4a7cacb0aec5082aba4de","Linux >= 3429ef5f50909cee9e498c50f0c499b9397116ce < 233a0945a4b1dbe3f38c30afb7d05b76c67f1193","Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < e15f16761594e80b15776980b27c35477655a135","Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < d8ffae016c4a78693fe1283335d0b6833a9c1366","Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < abd73229f0e886a91a16ea781ab656bd9b4d1ee8","Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < 74b4dbb946060a3233604d91859a9abd3708141d","Linux f54f9d5368a4e92ede7dd078a62788dae3a7c6ef","Linux >= 5.15.200 < 5.15.209","Linux >= 6.1.162 < 6.1.175","Linux >= 6.6.37 < 6.6.141","Linux >= 6.9.8 < 6.10","Linux 6.10"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:17:12.720046Z"},"published":"2026-06-24","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:23:56.931Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-53048","references":[{"url":"https://git.kernel.org/stable/c/cec55674354794eddb80b914f73a6bf9b7fc304a"},{"url":"https://git.kernel.org/stable/c/2fc4c868c9060f424fd4a7cacb0aec5082aba4de"},{"url":"https://git.kernel.org/stable/c/233a0945a4b1dbe3f38c30afb7d05b76c67f1193"},{"url":"https://git.kernel.org/stable/c/e15f16761594e80b15776980b27c35477655a135"},{"url":"https://git.kernel.org/stable/c/d8ffae016c4a78693fe1283335d0b6833a9c1366"},{"url":"https://git.kernel.org/stable/c/abd73229f0e886a91a16ea781ab656bd9b4d1ee8"},{"url":"https://git.kernel.org/stable/c/74b4dbb946060a3233604d91859a9abd3708141d"}],"tags":["cve.org"],"epss":0.00123,"epssPercentile":0.02037,"ingestedAt":"2026-11-06T16:57:43.302Z","slug":"CVE-2026-53048","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngfs2: prevent NULL pointer dereference during unmount\n\nWhen flushing out outstanding glock work during an unmount, gfs2_log_flush()\ncan be called when sdp->sd_jdesc has already been deallocated and sdp->sd_jdesc\nis NULL.  Commit 35264909e9d1 (\"gfs2: Fix NULL pointer dereference in\ngfs2_log_flush\") added a check for that to gfs2_log_flush() itself, but it\nmissed the sdp->sd_jdesc dereference in gfs2_log_release().  Fix that.\n\n## Affected\n\n- `Linux >= c3c5cfa3170c0940bc66a142859caac07d19b9d6 < cec55674354794eddb80b914f73a6bf9b7fc304a`\n- `Linux >= 5f6a84cfb33b34610623857bd93919dcb661e29b < 2fc4c868c9060f424fd4a7cacb0aec5082aba4de`\n- `Linux >= 3429ef5f50909cee9e498c50f0c499b9397116ce < 233a0945a4b1dbe3f38c30afb7d05b76c67f1193`\n- `Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < e15f16761594e80b15776980b27c35477655a135`\n- `Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < d8ffae016c4a78693fe1283335d0b6833a9c1366`\n- `Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < abd73229f0e886a91a16ea781ab656bd9b4d1ee8`\n- `Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < 74b4dbb946060a3233604d91859a9abd3708141d`\n- `Linux f54f9d5368a4e92ede7dd078a62788dae3a7c6ef`\n- `Linux >= 5.15.200 < 5.15.209`\n- `Linux >= 6.1.162 < 6.1.175`\n- `Linux >= 6.6.37 < 6.6.141`\n- `Linux >= 6.9.8 < 6.10`\n- `Linux 6.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}