AUGUST 15, 2026
Live Feed
Back to database
Case File

CVE-2026-72374

UNKNOWN · CVSS N/A

Source: NVD + CISA KEV + EPSS · Published 2026-08-15 · Last synced 2026-08-15

CyberRota Analysis

AI-Generated

The vulnerability affects the AFS filesystem client in the Linux kernel, specifically in the handling of callback service message parsers. An improper return value from the parser can lead to incorrect processing of incoming requests, potentially resulting in denial of service or data integrity issues. Linux system administrators and developers utilizing the AFS filesystem should prioritize applying the fix to mitigate these risks.

CVE
CVE-2026-72374
Severity
UNKNOWN
CVSS
N/A
EPSS
N/A
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incoming request stream, and this should return -EAGAIN the last packet hasn't yet been seen, but all currently queued received data is consumed. afs_extract_data() does this, but the -EAGAIN return is switched to 0 inadvertantly Fix callback service message parsers to pass through -EAGAIN