AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72161

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the OCFS2 filesystem in the Linux kernel, where a NULL pointer dereference can occur during the unmount process when the journal is freed. This flaw could lead to system crashes or instability due to improper handling of cached inodes. Administrators of Linux systems utilizing the OCFS2 filesystem should prioritize applying the fix to prevent potential disruptions in service.

CVE
CVE-2026-72161
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ocfs2: add journal NULL check in ocfs2_checkpoint_inode() During unmount, ocfs2_journal_shutdown() frees the journal and sets osb->journal to NULL. Later, when VFS evicts remaining cached inodes, ocfs2_evict_inode() -> ocfs2_clear_inode() -> ocfs2_checkpoint_inode() -> ocfs2_ci_fully_checkpointed() dereferences osb->journal, causing a NULL pointer dereference. Fix this by adding a NULL check for osb->journal in ocfs2_checkpoint_inode(). If the journal is NULL, it has already been fully flushed and destroyed during shutdown, so there is nothing to checkpoint.