CVE-2026-63804

The CVE-2026-63804 entry concerns the Linux kernel GFS2: gfs2_qd_dealloc uses the superblock sdp via qd->qd_sbd after freeing qd, risking use-after-free when gfs2_put_super() may already free sdp via free_sbd() during unmount. The root cause is that an RCU callback could observe a freed superb...

CVE-2026-63804 gfs2: fix use-after-free in gfs2_qd_dealloc

In the Linux kernel, the following vulnerability has been resolved: gfs2: fix use-after-free in gfs2qddealloc gfs2qddealloc, called as an RCU callback from gfs2qddispose, accesses the superblock object sdp through qd-qdsbd after freeing qd. It does so to decrement sdquotacount and wake up...