CVE-2026-72371

high

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on Fix afs_insert_volume_into_cell() to set AFS_VOLUME_RM_TREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volume to be removed from the tree twice and the new volume never to be removed.

References

https://git.kernel.org/stable/c/d154c20837f379343f192d4b8d9dd4ef145562e6

https://git.kernel.org/stable/c/d0c8ad418b47891a03426c5e02ebb0537f8d68f8

https://git.kernel.org/stable/c/c421bc6b957e56e45e12dbaeaf70a60db20d6465

https://git.kernel.org/stable/c/6fa9a8a73e16aa22fce6e41cc00d59c767f0a540

https://git.kernel.org/stable/c/56b4e4b26f84411d880f968a539207b0a8889c8c

https://git.kernel.org/stable/c/1607075220cf57161d9116512994c159eacefc0d

https://git.kernel.org/stable/c/158c5a0b1dfc0e6a419efe18404047a4d2dff59e

Details

Source: Mitre, NVD

Published: 2026-08-15

Updated: 2026-08-17

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C

Severity: Medium

CVSS v3

Base Score: 7.8

Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Severity: High

EPSS

EPSS: 0.00215