CVE-2026-74425

Received Received - Intake

AFS Cache Manager Callback State Handling Flaw

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: afs: handle CB.InitCallBackState3 requests without a server record The cache manager callback path now attaches the server record to an incoming call through the rxrpc peer's app data. That association is not guaranteed to exist for every callback request, and most callback handlers already tolerate that case. Make CB.InitCallBackState3 follow the same pattern by checking whether a server record was attached before using it. If the peer is not mapped to a server record, trace the request and ignore it, matching the existing behaviour for other unmatched callback requests. This keeps the callback handler consistent with the rest of the cache manager service and avoids depending on peer state that may not be available for a given request.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-74425

EUVD

EUVD-2026-59572

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves the AFS (Andrew File System) cache manager handling callback requests incorrectly. Specifically, the CB.InitCallBackState3 request may attempt to use a server record that is not attached to the incoming call. The fix ensures the handler checks for the server record before using it, ignoring the request if missing to maintain consistency with other callback handlers.

Detection Guidance

This vulnerability is specific to the Linux kernel's AFS (Andrew File System) cache manager callback handling. Detection requires checking kernel logs for callback-related errors or monitoring for unexpected callback state requests. Use commands like 'dmesg | grep -i afs' or 'journalctl -k | grep -i afs' to inspect kernel logs for AFS-related errors or warnings.

Impact Analysis

If exploited, this could lead to denial-of-service conditions in AFS operations. Attackers might trigger unhandled callback requests, causing the system to ignore valid requests or crash. Users relying on AFS for file sharing could experience disruptions or data access issues.

Compliance Impact

This vulnerability in the Linux kernel's AFS (Andrew File System) callback handling does not directly impact compliance with GDPR, HIPAA, or similar standards. It is a local denial-of-service or potential data integrity issue within the AFS cache manager, not a data exposure or privacy breach.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor vendor advisories for kernel updates and apply patches promptly. If immediate patching is not possible, consider disabling AFS services temporarily until the kernel is updated.

Hi! I’m here to help you understand CVE-2026-74425. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70