CVE-2026-72373

HighCVSS 7.5

Published: 15/08/2026(UTC)Updated: 17/08/2026(UTC)Translated: 15/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.62%

47th percentile - higher than 47% of all known CVEs

Summary

In the Linux kernel's AFS filesystem, afs_break_some_callbacks() does not check if afs_lookup_volume_rcu() returned NULL (e.g., when the volume is unknown). This could lead to a NULL pointer dereference.

Risk Assessment

This could cause a system crash (kernel panic) or memory corruption. The vulnerability affects AFS clients.

Recommendation

Apply the kernel patch that adds a NULL check before using the result. Update your system to a kernel version with this fix.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_some_callbacks() Fix afs_break_some_callbacks() to check to see if afs_lookup_volume_rcu() returned NULL (e.g. the specified volume is unknown).