CVE-2026-74427
Received Received - Intake

AFS Network Namespace Teardown Flaw Leading to Preallocation Leak

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network namespace to make sure it cancels the work item that keeps the preallocated rxrpc call/conn/peer queue charged before incoming calls are disabled (i.e. listen 0). Also, if net->live is false because the afs netns is being deleted, make afs_charge_preallocation() skip charging and make afs_rx_new_call() avoid requeuing the charger. (This was found by AI review).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-74427
EUVD
EUVD-2026-59574

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper cleanup during network namespace teardown in the AFS (Andrew File System) module. When a network namespace is deleted, the system fails to properly cancel a work item that charges preallocated rxrpc resources. This could lead to resource leaks or unexpected behavior during namespace cleanup.

Detection Guidance

This vulnerability affects the AFS (Andrew File System) component in the Linux kernel. Detection requires checking kernel logs for afs-related errors during network namespace teardown or examining system calls related to afs operations. Commands like dmesg | grep afs or journalctl -k | grep afs may help identify issues.

Impact Analysis

If you use AFS in a Linux environment with network namespaces, this flaw could cause resource leaks during namespace teardown. This might lead to performance degradation, system instability, or unexpected crashes in scenarios involving frequent network namespace creation and deletion.

Mitigation Strategies

Apply the latest Linux kernel patches to resolve the afs network namespace teardown issue. Monitor kernel logs for afs-related errors after applying updates. If AFS is not actively used, consider disabling the afs module via rmmod afs or blacklisting it in kernel configuration.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-74427. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart