CVE-2026-72378

Received Received - Intake

AFS Error Code Handling Flaw in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on every iteration.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72378

EUVD

EUVD-2026-59277

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where error codes in the afs_extract_vl_addrs() function are not properly set during every loop iteration. This could lead to incorrect error handling when adding volume location addresses.

Detection Guidance

This vulnerability is specific to the Linux kernel's AFS (Andrew File System) module and does not provide direct detection commands. It involves incorrect error code handling in afs_extract_vl_addrs(). To detect it, check kernel logs for AFS-related errors or crashes after updating the kernel. Use commands like dmesg | grep afs or journalctl -k | grep afs to inspect AFS module behavior.

Impact Analysis

This vulnerability may cause improper error handling in AFS (Andrew File System) operations, potentially leading to system crashes, data corruption, or unexpected behavior when accessing network volumes.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or other common standards and regulations. It is a Linux kernel issue related to error code handling in the AFS (Andrew File System) component, which does not introduce data breaches or unauthorized access risks.

Mitigation Strategies

Update the Linux kernel to the latest patched version to resolve the afs_extract_vl_addrs() error code issue.

Hi! I’m here to help you understand CVE-2026-72378. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70