CVE-2026-53272

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the erofs component. The z erofs decompress kickoff() function can race with the filesystem unmount process, leading to a use-after-free on sbi->sync decompress. This occurs when z erofs endio() calls z erofs decompress kickoff() to asynchronously queue z erofs decompressqueue work(). If the unmount workflow proceeds after all folios are unlocked, the sbi (super block info) may be freed via erofs sb free() and kfree(sbi) before the kworker accesses sbi->sync decompress.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.