What’s Vulnerable › Vulnerabilities

CVE-2026-72378: afs: Fix error code in afs_extract_vl_addrs()

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-08-17

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix error code in afs_extract_vl_addrs() The error codes on these paths are only set on the first iteration through the loop. Set the correct error code on every iteration.

Affected products

• Linux kernel: 4.20 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4897cb71d4ab1f7e1a214adb1e4b80176702368d
• https://git.kernel.org/stable/c/4e0b047848a855f2c933a6439f76a01743ba5620
• https://git.kernel.org/stable/c/7ce6737a975ea3e0dc2e5946628d233779ca0caf
• https://git.kernel.org/stable/c/8530206911fd66ad739ca5ce95f1d069f3d42204
• https://git.kernel.org/stable/c/9ad9016e3333c3c1f9284a253ff0658369e07aac
• https://git.kernel.org/stable/c/bdcd80ff12939d172043fac5eb822b92366a1bab
• https://git.kernel.org/stable/c/cb33dd2968588c78fad78dec19f61cabe5785494
• https://git.kernel.org/stable/c/f70fbf2b974b63a7042705c2b0464cb8c97e9f34

Get alerted when CVE-2026-72378 or the next vulnerability affects your stack