CVE-2026-72378
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk51th percentile - higher than 51% of all known CVEs
Summary
In the Linux kernel, in afs_extract_vl_addrs(), error codes are only set on the first iteration of the loop. Subsequent iterations do not update them, which can lead to incorrect error reporting.
Risk Assessment
Incorrect error codes may mask real issues with the AFS filesystem, making diagnosis and repair difficult. This could lead to unexpected behavior of the AFS client.
Recommendation
Apply the kernel patch that sets the correct error code on every iteration. Update your system to a kernel version with this fix.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on every iteration.