What’s Vulnerable › Vulnerabilities

CVE-2026-72376: afs: Fix misplaced inc of net->cells_outstanding

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix misplaced inc of net->cells_outstanding Fix net->cells_outstanding being incremented before the check for failure of idr_alloc_cyclic(), leaving the count incremented on error.

Affected products

• Linux kernel: from 5.8.17 before 5.9; from 5.9.2 before 5.10; 5.10 — fixed in 5.10, 5.9, 7.2

How to fix

Upgrade to a fixed version: Linux kernel 5.10, 5.9, 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/5ea289ca751c47125f6a4138c93ba10c05cd28f0
• https://git.kernel.org/stable/c/654a546c34f3921dd03f9ea74e60139ebffd9e20
• https://git.kernel.org/stable/c/6e310f818abcef947a06584158b9e6c6cd0c98d3
• https://git.kernel.org/stable/c/c9c3b615a462a4023bd148f02c564e175ed10502

Get alerted when CVE-2026-72376 or the next vulnerability affects your stack