CVE-2026-72378

afs: Fix error code in afs_extract_vl_addrs()

State: Published
Severity: 7.5 High
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix error code in afs_extract_vl_addrs()

The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on every iteration.

Scores

CVSS	Score	Vector	Source
3.1	7.5 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 7ce6737a975ea3e0dc2e5946628d233779ca0cafAffected 0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 4e0b047848a855f2c933a6439f76a01743ba5620Affected 0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before f70fbf2b974b63a7042705c2b0464cb8c97e9f34Affected 0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 9ad9016e3333c3c1f9284a253ff0658369e07aacAffected 0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before cb33dd2968588c78fad78dec19f61cabe5785494Affected 0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 8530206911fd66ad739ca5ce95f1d069f3d42204Affected 0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before bdcd80ff12939d172043fac5eb822b92366a1babAffected 0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 4897cb71d4ab1f7e1a214adb1e4b80176702368dAffected
LinuxLinux	4.20Affected before 4.20Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 7ce6737a975ea3e0dc2e5946628d233779ca0cafAffected
0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 4e0b047848a855f2c933a6439f76a01743ba5620Affected
0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before f70fbf2b974b63a7042705c2b0464cb8c97e9f34Affected
0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 9ad9016e3333c3c1f9284a253ff0658369e07aacAffected
0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before cb33dd2968588c78fad78dec19f61cabe5785494Affected
0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 8530206911fd66ad739ca5ce95f1d069f3d42204Affected
0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before bdcd80ff12939d172043fac5eb822b92366a1babAffected
0a5143f2f89cc88d8a3eada8e8ccd86c1e988257 to before 4897cb71d4ab1f7e1a214adb1e4b80176702368dAffected

LinuxLinux

4.20Affected
before 4.20Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.