CVE-2026-74427

afs: Fix netns teardown to cancel the preallocation charger

State: Published
Severity: 9.8 Critical
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix netns teardown to cancel the preallocation charger

Fix the teardown of an afs network namespace to make sure it cancels the work item that keeps the preallocated rxrpc call/conn/peer queue charged before incoming calls are disabled (i.e. listen 0).

Also, if net->live is false because the afs netns is being deleted, make afs_charge_preallocation() skip charging and make afs_rx_new_call() avoid requeuing the charger.

(This was found by AI review).

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before 63ccaf1bdf8be2330f47f9b5b233dd3fd04acbd9Affected 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before f5096e18b6b7fbd1c2a1942e275a51bcfdfb2ad1Affected 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before 59e8b7652f6cbfb62d377ead0ad553c1b4e39a7aAffected 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before 85d5fb80fe4f0cc836b6df83f26de204fe102ff7Affected 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before a33975ff2b6ea47b8f29956403374b1cdd057539Affected 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before b83ecf80e28afb7b6595ba79932e77ca68a5a83dAffected 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before eec89c5f8e1adc1de4824042ef75f62aed804153Affected 00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before 47694fbc9d24ab6bf210f91e8efe06a10a478064Affected
LinuxLinux	4.9Affected before 4.9Not affected 5.10.261 through 5.10.Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before 63ccaf1bdf8be2330f47f9b5b233dd3fd04acbd9Affected
00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before f5096e18b6b7fbd1c2a1942e275a51bcfdfb2ad1Affected
00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before 59e8b7652f6cbfb62d377ead0ad553c1b4e39a7aAffected
00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before 85d5fb80fe4f0cc836b6df83f26de204fe102ff7Affected
00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before a33975ff2b6ea47b8f29956403374b1cdd057539Affected
00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before b83ecf80e28afb7b6595ba79932e77ca68a5a83dAffected
00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before eec89c5f8e1adc1de4824042ef75f62aed804153Affected
00e907127e6f86d0f9b122d9b4347a8aa09a8b61 to before 47694fbc9d24ab6bf210f91e8efe06a10a478064Affected

LinuxLinux

4.9Affected
before 4.9Not affected
5.10.261 through 5.10.*Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.