CVE-2026-31455

xfs: stop reclaim before pushing AIL during unmount

published April 22, 2026

CVSS
—
EPSS
0%
Percentile
6.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

xfs: stop reclaim before pushing AIL during unmount

The unmount sequence in xfs_unmount_flush_inodes() pushed the AIL while

background reclaim and inodegc are still running. This is broken

independently of any use-after-free issues - background reclaim and

inodegc should not be running while the AIL is being pushed during

unmount, as inodegc can dirty and insert inodes into the AIL during the

flush, and background reclaim can race to abort and free dirty inodes.

Reorder xfs_unmount_flush_inodes() to stop inodegc and cancel background

reclaim before pushing the AIL. Stop inodegc before cancelling

m_reclaim_work because the inodegc worker can re-queue m_reclaim_work

via xfs_inodegc_set_reclaimable.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.2th percentile
Published
2026-04-22T13:53Z
EPSS history
Timeline
  • 22 APR 13:53Z
    xfs: stop reclaim before pushing AIL during unmount
    cvelistv5