---
id: CVE-2026-53048
title: 'gfs2: prevent NULL pointer dereference during unmount'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  gfs2: prevent NULL pointer dereference during unmount

  When flushing out outstanding glock work during an unmount, gfs2_log_flush()
  can be called when sdp->sd_jdesc has…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c3c5cfa3170c0940bc66a142859caac07d19b9d6 <
    cec55674354794eddb80b914f73a6bf9b7fc304a
  - >-
    Linux >= 5f6a84cfb33b34610623857bd93919dcb661e29b <
    2fc4c868c9060f424fd4a7cacb0aec5082aba4de
  - >-
    Linux >= 3429ef5f50909cee9e498c50f0c499b9397116ce <
    233a0945a4b1dbe3f38c30afb7d05b76c67f1193
  - >-
    Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 <
    e15f16761594e80b15776980b27c35477655a135
  - >-
    Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 <
    d8ffae016c4a78693fe1283335d0b6833a9c1366
  - >-
    Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 <
    abd73229f0e886a91a16ea781ab656bd9b4d1ee8
  - >-
    Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 <
    74b4dbb946060a3233604d91859a9abd3708141d
  - Linux f54f9d5368a4e92ede7dd078a62788dae3a7c6ef
  - Linux >= 5.15.200 < 5.15.209
  - Linux >= 6.1.162 < 6.1.175
  - Linux >= 6.6.37 < 6.6.141
  - Linux >= 6.9.8 < 6.10
  - Linux 6.10
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-06T16:17:12.720046Z'
published: '2026-06-24'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T16:23:56.931Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-53048'
references:
  - url: 'https://git.kernel.org/stable/c/cec55674354794eddb80b914f73a6bf9b7fc304a'
  - url: 'https://git.kernel.org/stable/c/2fc4c868c9060f424fd4a7cacb0aec5082aba4de'
  - url: 'https://git.kernel.org/stable/c/233a0945a4b1dbe3f38c30afb7d05b76c67f1193'
  - url: 'https://git.kernel.org/stable/c/e15f16761594e80b15776980b27c35477655a135'
  - url: 'https://git.kernel.org/stable/c/d8ffae016c4a78693fe1283335d0b6833a9c1366'
  - url: 'https://git.kernel.org/stable/c/abd73229f0e886a91a16ea781ab656bd9b4d1ee8'
  - url: 'https://git.kernel.org/stable/c/74b4dbb946060a3233604d91859a9abd3708141d'
tags:
  - cve.org
epss: 0.00123
epssPercentile: 0.02037
ingestedAt: '2026-11-06T16:57:43.302Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

gfs2: prevent NULL pointer dereference during unmount

When flushing out outstanding glock work during an unmount, gfs2_log_flush()
can be called when sdp->sd_jdesc has already been deallocated and sdp->sd_jdesc
is NULL.  Commit 35264909e9d1 ("gfs2: Fix NULL pointer dereference in
gfs2_log_flush") added a check for that to gfs2_log_flush() itself, but it
missed the sdp->sd_jdesc dereference in gfs2_log_release().  Fix that.

## Affected

- `Linux >= c3c5cfa3170c0940bc66a142859caac07d19b9d6 < cec55674354794eddb80b914f73a6bf9b7fc304a`
- `Linux >= 5f6a84cfb33b34610623857bd93919dcb661e29b < 2fc4c868c9060f424fd4a7cacb0aec5082aba4de`
- `Linux >= 3429ef5f50909cee9e498c50f0c499b9397116ce < 233a0945a4b1dbe3f38c30afb7d05b76c67f1193`
- `Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < e15f16761594e80b15776980b27c35477655a135`
- `Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < d8ffae016c4a78693fe1283335d0b6833a9c1366`
- `Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < abd73229f0e886a91a16ea781ab656bd9b4d1ee8`
- `Linux >= 35264909e9d1973ab9aaa2a1b07cda70f12bb828 < 74b4dbb946060a3233604d91859a9abd3708141d`
- `Linux f54f9d5368a4e92ede7dd078a62788dae3a7c6ef`
- `Linux >= 5.15.200 < 5.15.209`
- `Linux >= 6.1.162 < 6.1.175`
- `Linux >= 6.6.37 < 6.6.141`
- `Linux >= 6.9.8 < 6.10`
- `Linux 6.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.