CVE-2026-31455

In the Linux kernel, the following vulnerability has been resolved: xfs: stop reclaim before pushing AIL during unmount The unmount sequence in xfs_unmount_flush_inodes() pushed the AIL while background reclaim and inodegc are still running. This is broken independently of any use-after-free issues - background reclaim and inodegc should not be running while the AIL is being pushed during unmount, as inodegc can dirty and insert inodes into the AIL during the flush, and background reclaim can race to abort and free dirty inodes. Reorder xfs_unmount_flush_inodes() to stop inodegc and cancel background reclaim before pushing the AIL. Stop inodegc before cancelling m_reclaim_work because the inodegc worker can re-queue m_reclaim_work via xfs_inodegc_set_reclaimable.

• CWE-416

• https://git.kernel.org/stable/c/239d734c00644072862fa833805c4471573b1445Patch
• https://git.kernel.org/stable/c/4f24a767e3d64a5f58c595b5c29b6063a201f1e3Patch
• https://git.kernel.org/stable/c/558e3275d8a3b101be18a7fe7d1634053e9d9b07Patch
• https://git.kernel.org/stable/c/8147e304d7d32fd5c3e943babc296ce2873dc279Patch
• https://git.kernel.org/stable/c/a89434a6188d8430ea31120da96e3e4cefb58686Patch
• https://git.kernel.org/stable/c/bda27fc0b4eb3a425d9a18475c4cb94fbe862c60Patch
• https://git.kernel.org/stable/c/d38135af04a3ad8a585c899d176efc8e97853115Patch
• https://git.kernel.org/stable/c/e6cc490048f78b009259a5f032acead9f789c34cPatch

Published

Apr 22, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3145A flaw has been found in libvips up to 8.18.0. The affected …7.8
• CVE-2026-31450In the Linux kernel, the following vulnerability has been re…8.8
• CVE-2026-31451In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31452In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31453In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31454In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-31456In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2026-31457In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31458In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-31459In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-3146A vulnerability has been found in libvips up to 8.18.0. The …5.5
• CVE-2026-31460In the Linux kernel, the following vulnerability has been re…5.5