01 Record

CVE-2026-31577

nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

nilfs2: fix NULL i_assoc_inode dereference in nilfs_mdt_save_to_shadow_map

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.13% probability of exploitation activity in the next 30 days.
EPSS percentile: Ranks above 2.6% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Modified. NVD last modified this record on 2026-06-17.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-04-24 14:42Z4 MO AGO

Last updated

2026-06-14 17:42Z2 MO AGO

Reserved

2026-03-09

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-824Access of Uninitialized PointerBase

Data version

5.2

Document digest

719ea88b454ea625d5bbd4e47d68c6988f3f31a95a6e64eb195fc51a416140cf

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxd626fcdabea2258be395a775bdbe09270e9bf73d to < 6637bbcfb59df5b732a79e5ab1a74886a0b93d59, d05cc5395e36711edad8bdef6945f138d8a7097b to < 837c7a59fb58f81b0db33848357f6a5d0d1250ad, e897be17a441fa637cd166fc3de1445131e57692 to < 7902b1df1520a0880bcda7a3704cfacd17905a83, e897be17a441fa637cd166fc3de1445131e57692 to < 7318e3549518ce8f14776a489d86488d80d7e2c8, e897be17a441fa637cd166fc3de1445131e57692 to < 449ec5fc99f45974525ba9eea16b6670c45cd363, e897be17a441fa637cd166fc3de1445131e57692 to < c36e206f302f1ddefed92d09ecbba070e1ae079e, e897be17a441fa637cd166fc3de1445131e57692 to < 41de342278ae025c99cc8d33648773f05e306cf1, e897be17a441fa637cd166fc3de1445131e57692 to < 97fb7afec404912d967a7d4715f37742666b3084, e897be17a441fa637cd166fc3de1445131e57692 to < 4a4e0328edd9e9755843787d28f16dd4165f8b48, 6c3da8c0a35bbafe359d9166269d5590f29664de, 605babb979c213737618b1c837e89624e5ab11fd, 307d021b1a7f33048b624f7aaeaa75e3eae571f1, 1829b24a36ca12ca95b96d5478faeff40c17f2b6, 5.10.118 to < 5.10.258, 5.15.42 to < 5.15.209, 4.14.296 to < 4.15, 4.19.245 to < 4.20, 5.4.196 to < 5.5, 5.17.10 to < 5.18, 5.18—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/6637bbcfb59df5b732a79e5ab1a74886a0b93d59
git.kernel.orghttps://git.kernel.org/stable/c/837c7a59fb58f81b0db33848357f6a5d0d1250ad
git.kernel.orghttps://git.kernel.org/stable/c/7902b1df1520a0880bcda7a3704cfacd17905a83
git.kernel.orghttps://git.kernel.org/stable/c/7318e3549518ce8f14776a489d86488d80d7e2c8
git.kernel.orghttps://git.kernel.org/stable/c/449ec5fc99f45974525ba9eea16b6670c45cd363
git.kernel.orghttps://git.kernel.org/stable/c/c36e206f302f1ddefed92d09ecbba070e1ae079e
git.kernel.orghttps://git.kernel.org/stable/c/41de342278ae025c99cc8d33648773f05e306cf1
git.kernel.orghttps://git.kernel.org/stable/c/97fb7afec404912d967a7d4715f37742666b3084
git.kernel.orghttps://git.kernel.org/stable/c/4a4e0328edd9e9755843787d28f16dd4165f8b48

01 Record index

CVE-2026-31577

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2026-31577

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References