CVE-2026-97585
Received Received - Intake

Double-Unmap Vulnerability in Linux Kernel AFS

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: afs: Fix double-unmap of directory block Fix afs_edit_dir_remove() to use a cleanup function to unmap the block pointed to by afs_dir_iter::block if it's left pointing to something rather than manually kunmapping the blocks. Manually kunmapping without clearing iter.blocks can result in a double-kunmap if afs_dir_find_block() is called twice in a row (which would be the case if the block being modified is not first in the hash chain).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97585
EUVD
EUVD-2026-86893

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a double-unmap issue in the AFS (Andrew File System) directory handling. The function afs_edit_dir_remove() incorrectly unmaps a directory block without clearing the iterator's block pointer, which can lead to a double-kunmap if afs_dir_find_block() is called twice consecutively.

Detection Guidance

This vulnerability is specific to the Linux kernel's AFS (Andrew File System) module and involves a double-unmap issue in directory block handling. Detection requires checking kernel logs for afs-related errors or crashes, particularly during directory operations. Commands like dmesg | grep afs or journalctl -k | grep afs may help identify issues. Ensure your kernel version is updated to the patched version.

Impact Analysis

This vulnerability could cause kernel memory corruption or crashes due to double-kunmap operations. Users running systems with AFS support may experience system instability or potential denial-of-service conditions if the affected code path is triggered.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. Reboot the system to ensure the updated kernel is active. Monitor system logs for any afs-related errors post-update. If AFS is not used, consider disabling the afs kernel module to reduce attack surface.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97585. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart