What’s Vulnerable › Vulnerabilities

CVE-2026-80878: afs: Fix leak of ungot volume

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-04 · updated 2026-09-14

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix leak of ungot volume Fix afs_lookup_volume_rcu() so that it doesn't leak a dying volume if afs_try_get_volume() fails.

Affected products

• Linux kernel: 6.8 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/78e8ee25a5e8f2eb85bbabbeb15c8a2445b4a67f
• https://git.kernel.org/stable/c/7d10cfec6cbce7396ed5cf6abd8c34bae09c393b
• https://git.kernel.org/stable/c/9cabf1c86948793fbad09023bd2ec58c71b9c1d4
• https://git.kernel.org/stable/c/d672c276f685a540ed2b2a8bafaed4650a89022c

Get alerted when CVE-2026-80878 or the next vulnerability affects your stack