CVE-2026-97586
Received Received - Intake

Memory Corruption in Linux Kernel AFS

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing kunmap in afs_dir_search_bucket() Fix afs_dir_search_bucket() to kunmap the block it's using in the "bad:" path.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
CVE-2026-97586
EUVD
EUVD-2026-86894

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a missing kunmap operation in the Linux kernel's AFS (Andrew File System) directory search function. It occurs in afs_dir_search_bucket() where a block is mapped but not properly unmapped in an error path, potentially leading to memory issues.

Detection Guidance

This vulnerability is specific to the Linux kernel's AFS (Andrew File System) module. Detection requires checking kernel logs for afs-related errors or kernel panics. Use commands like 'dmesg | grep afs' or 'journalctl -k | grep afs' to search for related messages.

Impact Analysis

This vulnerability could cause memory corruption or crashes in systems using the AFS filesystem, potentially leading to denial of service or privilege escalation if exploited.

Mitigation Strategies

Update your Linux kernel to the latest patched version. If immediate patching is not possible, disable the AFS module using 'modprobe -r afs' or blacklist it in configuration files to prevent loading.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-97586. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart