CVE-2026-72374

In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incoming request stream, and this should return -EAGAIN the last packet hasn't yet been seen, but all currently queued received data is consumed. afs_extract_data() does this, but the -EAGAIN return is switched to 0 inadvertantly Fix callback service message parsers to pass through -EAGAIN

CVSS v3 7.5 HIGH

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/09c67a7ded481482155b836c8c7f078a3075f8de
https://git.kernel.org/stable/c/0acbc09d2aca0432af45cec114f20d55ceafaec4
https://git.kernel.org/stable/c/0f36469d7ce98b362934113c550d08bb0c784231
https://git.kernel.org/stable/c/239cd337c9d047e7097f5b2ebbb41ddfb8180bc6
https://git.kernel.org/stable/c/26b737b3769e92493fe94c34620399d93ca231ae
https://git.kernel.org/stable/c/5a39b145a8fb49f316e7ec1f29ba51d68095c7e4
https://git.kernel.org/stable/c/772850871a2e772e26f9d93f1e9ddd413b3eeaa4
https://git.kernel.org/stable/c/f14dd036fad3d359f26f1282199cec06b3a9362b

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:22

Updated : 2026-08-17 06:18

NVD link : CVE-2026-72374

Mitre link : CVE-2026-72374

CVE.ORG link : CVE-2026-72374

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72374", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "d001648ec7cf8b21ae9eec8b9ba4a18295adfb14", "lessThan": "26b737b3769e92493fe94c34620399d93ca231ae", "versionType": "git"}, {"status": "affected", "version": "d001648ec7cf8b21ae9eec8b9ba4a18295adfb14", "lessThan": "09c67a7ded481482155b836c8c7f078a3075f8de", "versionType": "git"}, {"status": "affected", "version": "d001648ec7cf8b21ae9eec8b9ba4a18295adfb14", "lessThan": "239cd337c9d047e7097f5b2ebbb41ddfb8180bc6", "versionType": "git"}, {"status": "affected", "version": "d001648ec7cf8b21ae9eec8b9ba4a18295adfb14", "lessThan": "5a39b145a8fb49f316e7ec1f29ba51d68095c7e4", "versionType": "git"}, {"status": "affected", "version": "d001648ec7cf8b21ae9eec8b9ba4a18295adfb14", "lessThan": "772850871a2e772e26f9d93f1e9ddd413b3eeaa4", "versionType": "git"}, {"status": "affected", "version": "d001648ec7cf8b21ae9eec8b9ba4a18295adfb14", "lessThan": "0acbc09d2aca0432af45cec114f20d55ceafaec4", "versionType": "git"}, {"status": "affected", "version": "d001648ec7cf8b21ae9eec8b9ba4a18295adfb14", "lessThan": "f14dd036fad3d359f26f1282199cec06b3a9362b", "versionType": "git"}, {"status": "affected", "version": "d001648ec7cf8b21ae9eec8b9ba4a18295adfb14", "lessThan": "0f36469d7ce98b362934113c550d08bb0c784231", "versionType": "git"}], "programFiles": ["fs/afs/cmservice.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "4.9"}, {"status": "unaffected", "version": "0", "lessThan": "4.9", "versionType": "semver"}, {"status": "unaffected", "version": "5.10.261", "versionType": "semver", "lessThanOrEqual": "5.10.*"}, {"status": "unaffected", "version": "5.15.212", "versionType": "semver", "lessThanOrEqual": "5.15.*"}, {"status": "unaffected", "version": "6.1.178", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["fs/afs/cmservice.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:22:10.873", "references": [{"url": "https://git.kernel.org/stable/c/09c67a7ded481482155b836c8c7f078a3075f8de", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/0acbc09d2aca0432af45cec114f20d55ceafaec4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/0f36469d7ce98b362934113c550d08bb0c784231", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/239cd337c9d047e7097f5b2ebbb41ddfb8180bc6", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/26b737b3769e92493fe94c34620399d93ca231ae", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/5a39b145a8fb49f316e7ec1f29ba51d68095c7e4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/772850871a2e772e26f9d93f1e9ddd413b3eeaa4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/f14dd036fad3d359f26f1282199cec06b3a9362b", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix callback service message parsers to pass through -EAGAIN\n\nThe AFS filesystem client uses an rxrpc server to listen for callback\nnotifications. Each callback call type handler has a delivery function\nthat parses the incoming request stream, and this should return -EAGAIN the\nlast packet hasn't yet been seen, but all currently queued received data is\nconsumed. afs_extract_data() does this, but the -EAGAIN return is switched\nto 0 inadvertantly\n\nFix callback service message parsers to pass through -EAGAIN"}], "lastModified": "2026-08-17T06:18:41.710", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}