CVE-2026-72378

afs: Fix error code in afs_extract_vl_addrs()

HIGH

7.5

CVSS Score

Published: August 15, 2026 at 05:56 AM UTC

Updated: August 17, 2026 at 06:18 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 0.7%

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on every iteration.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

4.20 ≤ v < 5.10.2614.20 ≤ v < 5.15.2124.20 ≤ v < 6.1.1784.20 ≤ v < 6.12.974.20 ≤ v < 6.18.404.20 ≤ v < 6.6.1454.20 ≤ v < 7.1.54.20 ≤ v < 7.20a5143f2f89cc88d8a3eada8e8ccd86c1e9882574.20

Vendor states this is fixed in 4897cb71d4ab1f7e1a214adb1e4b80176702368d (fixed)

Vendor states this is fixed in 4e0b047848a855f2c933a6439f76a01743ba5620 (fixed)

Vendor states this is fixed in 7ce6737a975ea3e0dc2e5946628d233779ca0caf (fixed)

Vendor states this is fixed in 8530206911fd66ad739ca5ce95f1d069f3d42204 (fixed)

Vendor states this is fixed in 9ad9016e3333c3c1f9284a253ff0658369e07aac (fixed)

Vendor states this is fixed in bdcd80ff12939d172043fac5eb822b92366a1bab (fixed)

Vendor states this is fixed in cb33dd2968588c78fad78dec19f61cabe5785494 (fixed)

Vendor states this is fixed in f70fbf2b974b63a7042705c2b0464cb8c97e9f34 (fixed)

Vendor states this is fixed in 4.20 (unaffected)

Vendor states this is fixed in 5.10.261 (unaffected)

Vendor states this is fixed in 5.15.212 (unaffected)

Vendor states this is fixed in 6.1.178 (unaffected)