CVE-2026-72371 - Vulnerability Details

- afs: Fix the volume AFS_VOLUME_RM_TREE is set on

Description

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix the volume AFS_VOLUME_RM_TREE is set on

Fix afs_insert_volume_into_cell() to set AFS_VOLUME_RM_TREE on the volume
replaced, not the new volume, as it's now removed from the cell's volume
tree. This will cause the old volume to be removed from the tree twice and
the new volume never to be removed.

Published: 2026-08-15

Score: 7.8 High

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Impact

The AFS subsystem in the Linux kernel incorrectly sets the AFS_VOLUME_RM_TREE flag on a volume that has already been removed from the cell's volume tree, instead of on the volume that is newly inserted. This misconfiguration causes the old volume to be removed twice and the new volume to never be removed, which can destabilize the filesystem and potentially deny service by leading to crashes or data corruption.

Affected Systems

All Linux kernel builds that include the AFS filesystem and have not incorporated the commit that fixes this issue are affected. The vulnerability applies broadly across Linux distributions because the AFS module is part of the mainline kernel repository.

Risk and Exploitability

The EPSS score is < 1% and the vulnerability is not listed in the CISA KEV catalog, indicating a low exploitation probability. Based on the description, it is inferred that exploitation would require local or kernel‑level privileges to manipulate the AFS volume tree. An attacker could trigger the double‑removal or fail‑to‑remove scenario, potentially destabilizing the filesystem and causing a service outage. The CVSS score of 7.8 indicates a High severity, and combined with the low EPSS, suggests a moderate risk that warrants prompt updating.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`98fb5eaade749e9d366fdd1f622d560ad68bdedd`	affected	< 6fa9a8a73e16aa22fce6e41cc00d59c767f0a540
`9b4c95a63e2dfe5ea73d92fb82ec34c3efa76284`	affected	< c421bc6b957e56e45e12dbaeaf70a60db20d6465
`c3215484ca1f64b6b8af03847856499e5364e65a`	affected	< 1607075220cf57161d9116512994c159eacefc0d
`9a6b294ab496650e9f270123730df37030911b55`	affected	< d154c20837f379343f192d4b8d9dd4ef145562e6
`9a6b294ab496650e9f270123730df37030911b55`	affected	< 158c5a0b1dfc0e6a419efe18404047a4d2dff59e
`9a6b294ab496650e9f270123730df37030911b55`	affected	< d0c8ad418b47891a03426c5e02ebb0537f8d68f8
`9a6b294ab496650e9f270123730df37030911b55`	affected	< 56b4e4b26f84411d880f968a539207b0a8889c8c
`5.15.146`	affected	< 5.15.212
`6.1.70`	affected	< 6.1.178
`6.6.9`	affected	< 6.6.145

Linux

affected

Version	Status	Constraints
`6.7`	affected	—
`0`	unaffected	< 6.7
`5.15.212`	unaffected	≤ 5.15.*
`6.1.178`	unaffected	≤ 6.1.*
`6.6.145`	unaffected	≤ 6.6.*
`6.12.97`	unaffected	≤ 6.12.*
`6.18.40`	unaffected	≤ 6.18.*
`7.1.5`	unaffected	≤ 7.1.*
`7.2`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[98fb5eaade749e9d366fdd1f622d560ad68bdedd,6fa9a8a73e16aa22fce6e41cc00d59c767f0a540)`	affected	code_commit	—
`[9b4c95a63e2dfe5ea73d92fb82ec34c3efa76284,c421bc6b957e56e45e12dbaeaf70a60db20d6465)`	affected	code_commit	—
`[c3215484ca1f64b6b8af03847856499e5364e65a,1607075220cf57161d9116512994c159eacefc0d)`	affected	code_commit	—
`[9a6b294ab496650e9f270123730df37030911b55,d154c20837f379343f192d4b8d9dd4ef145562e6)`	affected	code_commit	—
`[9a6b294ab496650e9f270123730df37030911b55,158c5a0b1dfc0e6a419efe18404047a4d2dff59e)`	affected	code_commit	—
`[9a6b294ab496650e9f270123730df37030911b55,d0c8ad418b47891a03426c5e02ebb0537f8d68f8)`	affected	code_commit	—
`[9a6b294ab496650e9f270123730df37030911b55,56b4e4b26f84411d880f968a539207b0a8889c8c)`	affected	code_commit	—
`[5.15.146,5.15.212)`	affected	semver	—
`[6.1.70,6.1.178)`	affected	semver	—
`[6.6.9,6.6.145)`	affected	semver	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`6.7`	affected	semver	—
`[0,6.7)`	unaffected	semver	—
`[5.15.212,5.15.*]`	unaffected	generic	—
`[6.1.178,6.1.*]`	unaffected	generic	—
`[6.6.145,6.6.*]`	unaffected	generic	—
`[6.12.97,6.12.*]`	unaffected	generic	—
`[6.18.40,6.18.*]`	unaffected	generic	—
`[7.1.5,7.1.*]`	unaffected	generic	—
`[7.2-rc2,*]`	unaffected	generic	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

Apply a kernel update that contains the commit referenced in the advisory URLs
Verify that AFS volume removal behaves correctly by performing test insertions and deletions
If an immediate update is unavailable, unmount or disable the AFS filesystem prior to performing operations that could trigger the removal logic

Generated by OpenCVE AI on August 22, 2026 at 07:58 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00176.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/158c5a0b1dfc0e6a419efe18404047a4d2dff59e
https://git.kernel.org/stable/c/1607075220cf57161d9116512994c159eacefc0d
https://git.kernel.org/stable/c/56b4e4b26f84411d880f968a539207b0a8889c8c
https://git.kernel.org/stable/c/6fa9a8a73e16aa22fce6e41cc00d59c767f0a540
https://git.kernel.org/stable/c/c421bc6b957e56e45e12dbaeaf70a60db20d6465
https://git.kernel.org/stable/c/d0c8ad418b47891a03426c5e02ebb0537f8d68f8
https://git.kernel.org/stable/c/d154c20837f379343f192d4b8d9dd4ef145562e6
https://lore.kernel.org/linux-cve-announce/2026081516-CVE-2026-72371-f92a@gregkh/T
https://nvd.nist.gov/vuln/detail/CVE-2026-72371
https://www.cve.org/CVERecord?id=CVE-2026-72371

History

Sat, 22 Aug 2026 06:15:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-416 CWE-665

Wed, 19 Aug 2026 00:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-763
References		https://lore.kernel.org/linux-cve-announce/2026081516-CVE-2026-72371-f92a@gregkh/T https://nvd.nist.gov/vuln/detail/CVE-2026-72371 https://www.cve.org/CVERecord?id=CVE-2026-72371
Metrics	threat_severity `None`	threat_severity `Moderate`

Mon, 17 Aug 2026 19:30:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-416 CWE-665

Mon, 17 Aug 2026 16:30:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-665

Mon, 17 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 7.8, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}`

Sat, 15 Aug 2026 18:45:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-665

Sat, 15 Aug 2026 06:00:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: afs: Fix the volume AFS_VOLUME_RM_TREE is set on Fix afs_insert_volume_into_cell() to set AFS_VOLUME_RM_TREE on the volume replaced, not the new volume, as it's now removed from the cell's volume tree. This will cause the old volume to be removed from the tree twice and the new volume never to be removed.
Title		afs: Fix the volume AFS_VOLUME_RM_TREE is set on
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/158c5a0b1dfc0e6a419efe18404047a4d2dff59e https://git.kernel.org/stable/c/1607075220cf57161d9116512994c159eacefc0d https://git.kernel.org/stable/c/56b4e4b26f84411d880f968a539207b0a8889c8c https://git.kernel.org/stable/c/6fa9a8a73e16aa22fce6e41cc00d59c767f0a540 https://git.kernel.org/stable/c/c421bc6b957e56e45e12dbaeaf70a60db20d6465 https://git.kernel.org/stable/c/d0c8ad418b47891a03426c5e02ebb0537f8d68f8 https://git.kernel.org/stable/c/d154c20837f379343f192d4b8d9dd4ef145562e6

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-15T05:56:07.299Z

Updated: 2026-08-17T05:43:24.298Z

Reserved: 2026-08-09T03:40:39.922Z

Link: CVE-2026-72371

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-15T06:22:10.570

Modified: 2026-08-17T06:18:41.353

Link: CVE-2026-72371

Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72371 - Bugzilla

OpenCVE Enrichment

Updated: 2026-08-22T08:00:13Z

Weaknesses

CWE-763
Release of Invalid Pointer or Reference

Impact

Affected Systems

Risk and Exploitability

Tracking

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object