CVE-2026-72371

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on Fix afs_insert_volume_into_cell() to set AFS_VOLUME_RM_TREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volume to be removed from the tree twice and the new volume never to be removed.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/158c5a0b1dfc0e6a419efe18404047a4d2dff59e
https://git.kernel.org/stable/c/1607075220cf57161d9116512994c159eacefc0d
https://git.kernel.org/stable/c/56b4e4b26f84411d880f968a539207b0a8889c8c
https://git.kernel.org/stable/c/6fa9a8a73e16aa22fce6e41cc00d59c767f0a540
https://git.kernel.org/stable/c/c421bc6b957e56e45e12dbaeaf70a60db20d6465
https://git.kernel.org/stable/c/d0c8ad418b47891a03426c5e02ebb0537f8d68f8
https://git.kernel.org/stable/c/d154c20837f379343f192d4b8d9dd4ef145562e6

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:22

Updated : 2026-08-17 06:18

NVD link : CVE-2026-72371

Mitre link : CVE-2026-72371

CVE.ORG link : CVE-2026-72371

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72371", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "98fb5eaade749e9d366fdd1f622d560ad68bdedd", "lessThan": "6fa9a8a73e16aa22fce6e41cc00d59c767f0a540", "versionType": "git"}, {"status": "affected", "version": "9b4c95a63e2dfe5ea73d92fb82ec34c3efa76284", "lessThan": "c421bc6b957e56e45e12dbaeaf70a60db20d6465", "versionType": "git"}, {"status": "affected", "version": "c3215484ca1f64b6b8af03847856499e5364e65a", "lessThan": "1607075220cf57161d9116512994c159eacefc0d", "versionType": "git"}, {"status": "affected", "version": "9a6b294ab496650e9f270123730df37030911b55", "lessThan": "d154c20837f379343f192d4b8d9dd4ef145562e6", "versionType": "git"}, {"status": "affected", "version": "9a6b294ab496650e9f270123730df37030911b55", "lessThan": "158c5a0b1dfc0e6a419efe18404047a4d2dff59e", "versionType": "git"}, {"status": "affected", "version": "9a6b294ab496650e9f270123730df37030911b55", "lessThan": "d0c8ad418b47891a03426c5e02ebb0537f8d68f8", "versionType": "git"}, {"status": "affected", "version": "9a6b294ab496650e9f270123730df37030911b55", "lessThan": "56b4e4b26f84411d880f968a539207b0a8889c8c", "versionType": "git"}, {"status": "affected", "version": "5.15.146", "lessThan": "5.15.212", "versionType": "semver"}, {"status": "affected", "version": "6.1.70", "lessThan": "6.1.178", "versionType": "semver"}, {"status": "affected", "version": "6.6.9", "lessThan": "6.6.145", "versionType": "semver"}], "programFiles": ["fs/afs/volume.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "6.7"}, {"status": "unaffected", "version": "0", "lessThan": "6.7", "versionType": "semver"}, {"status": "unaffected", "version": "5.15.212", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.178", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/afs/volume.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:10.570", "references": [{"url": "https://git.kernel.org/stable/c/158c5a0b1dfc0e6a419efe18404047a4d2dff59e", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/1607075220cf57161d9116512994c159eacefc0d", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/56b4e4b26f84411d880f968a539207b0a8889c8c", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/6fa9a8a73e16aa22fce6e41cc00d59c767f0a540", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/c421bc6b957e56e45e12dbaeaf70a60db20d6465", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d0c8ad418b47891a03426c5e02ebb0537f8d68f8", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/d154c20837f379343f192d4b8d9dd4ef145562e6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix the volume AFS_VOLUME_RM_TREE is set on\n\nFix afs_insert_volume_into_cell() to set AFS_VOLUME_RM_TREE on the volume\nreplaced, not the new volume, as it's now removed from the cell's volume\ntree. This will cause the old volume to be removed from the tree twice and\nthe new volume never to be removed."}], "lastModified": "2026-08-17T06:18:41.353", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}