CVE-2026-53165

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the iomap subsystem during buffered read failures. The function iomap finish folio read() reports errors using fserror report io(folio->mapping->host, ...) after decrementing the read bytes pending variable. If a folio is split across multiple read completions, it remains locked only while read bytes pending is greater than zero. Once the variable is decremented, a concurrent read completion can unlock the folio, allowing truncate logic to detach it by setting folio->mapping to NULL. This leads to a null pointer dereference when the error reporting path attempts to access folio->mapping.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.