What’s Vulnerable › Vulnerabilities

CVE-2026-97585: afs: Fix double-unmap of directory block

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-25 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix double-unmap of directory block Fix afs_edit_dir_remove() to use a cleanup function to unmap the block pointed to by afs_dir_iter::block if it's left pointing to something rather than manually kunmapping the blocks. Manually kunmapping without clearing iter.blocks can result in a double-kunmap if afs_dir_find_block() is called twice in a row (which would be the case if the block being modified is not first in the hash chain).

Affected products

• Linux kernel: 6.14 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/9d6c703e24da3d39067e3c75f4ac2f6001c2472f
• https://git.kernel.org/stable/c/b60f51e4ad0f6f940899788ccc2762db1e3b69e6
• https://git.kernel.org/stable/c/e3cfd3eb7d5be7787cc69530b423f788f14d084f

Get alerted when CVE-2026-97585 or the next vulnerability affects your stack