Log in Start free

Vulnerability · Published May 27, 2026 · Assigned by Linux

CVE-2026-45861gfs2: Fix slab-use-after-free in qd_put

High 7.8

In plain English

A high-severity use-after-free in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 8% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 91.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: gfs2: Fix slab-use-after-free in qd_put Commit a475c5dd16e5 ("gfs2: Free quota data objects synchronously") started freeing quota data objects during filesystem shutdown instead of putting them back onto the LRU list, but it failed to remove these objects from the LRU list, causing LRU list corruption. This caused use-after-free when the shrinker (gfs2_qd_shrink_scan) tried to access already-freed objects on the LRU list. Fix this by removing qd objects from the LRU list before freeing them in qd_put(). Initial fix from Deepanshu Kartikey <kartikey406@gmail.com>.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-abi-stablelists4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-core4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-cross-headers4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-debug4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-debug-core4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-debug-devel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-debug-modules4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-devel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-doc4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-headers4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-modules4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-modules-extra4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-rt4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-core4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-debug4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-debug-core4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-devel4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-modules4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.171.1.rt7.512.el8_10ALSA-2026:75746
AlmaLinux:8kernel-tools4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-tools-libs4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-zfcpdump4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8perf4.18.0-553.171.1.el8_10ALSA-2026:75747
AlmaLinux:8python3-perf4.18.0-553.171.1.el8_10ALSA-2026:75747
Debian:13linux6.12.85-1DEBIAN-CVE-2026-45861
Debian:14linux6.18.14-1DEBIAN-CVE-2026-45861
Rocky Linux:8kernel0:4.18.0-553.171.1.el8_10RLSA-2026:75747
Rocky Linux:8kernel-rt0:4.18.0-553.171.1.rt7.512.el8_10RLSA-2026:75746
Ubuntu:24.04:LTSlinux6.8.0-134.134UBUNTU-CVE-2026-45861
Ubuntu:25.10linuxno fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-aws6.8.0-1060.63UBUNTU-CVE-2026-45861
Ubuntu:25.10linux-awsno fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1060.63~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-azure6.8.0-1063.71UBUNTU-CVE-2026-45861
Ubuntu:25.10linux-azureno fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1063.71~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-azure-fde6.8.0-1062.69UBUNTU-CVE-2026-45861
Ubuntu:25.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-azure-fde-6.86.8.0-1062.69~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-gcp6.8.0-1063.69UBUNTU-CVE-2026-45861
Ubuntu:25.10linux-gcpno fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-gcp-6.86.8.0-1063.69~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-gke6.8.0-1058.64UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-gkeop6.8.0-1045.48UBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-hwe-6.86.8.0-136.136~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-ibm6.8.0-1060.61UBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-ibm-6.86.8.0-1060.61~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-134.134.1UBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.86.8.0-134.134.1~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1058.61UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1058.61~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-nvidia-lowlatency6.8.0-1058.61.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-nvidia-tegra6.8.0-1029.30UBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-oracle6.8.0-1057.58UBUNTU-CVE-2026-45861
Ubuntu:25.10linux-oracleno fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1057.58~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-raspi6.8.0-1060.64UBUNTU-CVE-2026-45861
Ubuntu:25.10linux-raspino fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-45861
Ubuntu:25.10linux-realtimeno fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-45861
Ubuntu:25.10linux-riscvno fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-riscv-6.86.8.0-134.134~22.04.1UBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-45861
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-45861
Ubuntu:24.04:LTSlinux-xilinx6.8.0-1032.33UBUNTU-CVE-2026-45861

Affected products (as reported)

VendorProductVersions
Linux Linux a475c5dd16e57c570113eccba51955b5df8bb052 – before 53aaf083de197946b25bc4ffa3068d37366ce73da475c5dd16e57c570113eccba51955b5df8bb052 – before ca7c67bdd293089b3483f18886d6b2d0037d2ad9a475c5dd16e57c570113eccba51955b5df8bb052 – before 1d47922b98046b8070a77347fb883a6523792803a475c5dd16e57c570113eccba51955b5df8bb052 – before 80fff26d7a0c3926b511661c27eecc811a420eefa475c5dd16e57c570113eccba51955b5df8bb052 – before 22150a7d401d9e9169b9b68e05bed95f7f49bf69
Linux Linux 6.6

Weakness: CWE-416 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References