CVE-2026-72374
Received Received - Intake

AFS Filesystem Callback Service Message Parser -EAGAIN Handling Flaw

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incoming request stream, and this should return -EAGAIN the last packet hasn't yet been seen, but all currently queued received data is consumed. afs_extract_data() does this, but the -EAGAIN return is switched to 0 inadvertantly Fix callback service message parsers to pass through -EAGAIN

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72374
EUVD
EUVD-2026-59273

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel affects the AFS filesystem client. It involves a bug where callback service message parsers incorrectly convert an -EAGAIN error code to 0. -EAGAIN indicates that more data is expected but not yet available, while 0 suggests successful processing. This can lead to improper handling of callback notifications.

Detection Guidance

This vulnerability is specific to the Linux kernel's AFS filesystem client and does not have direct network detection methods. Detection involves checking the kernel version for affected releases. Use uname -a to check the running kernel version and compare it against patched versions.

Impact Analysis

This vulnerability may cause the AFS filesystem client to mishandle callback notifications, potentially leading to data inconsistencies or missed updates. Users relying on AFS for file access could experience unexpected behavior or performance issues.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for CVE-2026-72374. This resolves the afs callback service message parser issue. Monitor vendor advisories for kernel updates and apply them promptly.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72374. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart