CVE-2026-72371

afs: Fix the volume AFS_VOLUME_RM_TREE is set on

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix the volume AFS_VOLUME_RM_TREE is set on

Fix afs_insert_volume_into_cell() to set AFS_VOLUME_RM_TREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volume to be removed from the tree twice and the new volume never to be removed.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	98fb5eaade749e9d366fdd1f622d560ad68bdedd to before 6fa9a8a73e16aa22fce6e41cc00d59c767f0a540Affected 9b4c95a63e2dfe5ea73d92fb82ec34c3efa76284 to before c421bc6b957e56e45e12dbaeaf70a60db20d6465Affected c3215484ca1f64b6b8af03847856499e5364e65a to before 1607075220cf57161d9116512994c159eacefc0dAffected 9a6b294ab496650e9f270123730df37030911b55 to before d154c20837f379343f192d4b8d9dd4ef145562e6Affected 9a6b294ab496650e9f270123730df37030911b55 to before 158c5a0b1dfc0e6a419efe18404047a4d2dff59eAffected 9a6b294ab496650e9f270123730df37030911b55 to before d0c8ad418b47891a03426c5e02ebb0537f8d68f8Affected 9a6b294ab496650e9f270123730df37030911b55 to before 56b4e4b26f84411d880f968a539207b0a8889c8cAffected 5.15.146 to before 5.15.212Affected 6.1.70 to before 6.1.178Affected 6.6.9 to before 6.6.145Affected
LinuxLinux	6.7Affected before 6.7Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

98fb5eaade749e9d366fdd1f622d560ad68bdedd to before 6fa9a8a73e16aa22fce6e41cc00d59c767f0a540Affected
9b4c95a63e2dfe5ea73d92fb82ec34c3efa76284 to before c421bc6b957e56e45e12dbaeaf70a60db20d6465Affected
c3215484ca1f64b6b8af03847856499e5364e65a to before 1607075220cf57161d9116512994c159eacefc0dAffected
9a6b294ab496650e9f270123730df37030911b55 to before d154c20837f379343f192d4b8d9dd4ef145562e6Affected
9a6b294ab496650e9f270123730df37030911b55 to before 158c5a0b1dfc0e6a419efe18404047a4d2dff59eAffected
9a6b294ab496650e9f270123730df37030911b55 to before d0c8ad418b47891a03426c5e02ebb0537f8d68f8Affected
9a6b294ab496650e9f270123730df37030911b55 to before 56b4e4b26f84411d880f968a539207b0a8889c8cAffected
5.15.146 to before 5.15.212Affected
6.1.70 to before 6.1.178Affected
6.6.9 to before 6.6.145Affected

LinuxLinux

6.7Affected
before 6.7Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.