Description
In the Linux kernel, the following vulnerability has been resolved:

afs: Fix netns teardown to cancel the preallocation charger

Fix the teardown of an afs network namespace to make sure it cancels the
work item that keeps the preallocated rxrpc call/conn/peer queue charged
before incoming calls are disabled (i.e. listen 0).

Also, if net->live is false because the afs netns is being deleted, make
afs_charge_preallocation() skip charging and make afs_rx_new_call() avoid
requeuing the charger.

(This was found by AI review).
Published: 2026-08-15
Score: 9.8 Critical
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Linux kernel vulnerability involved the AFS network namespace teardown path, where the preallocation charger work item was not cancelled when a namespace was removed. This oversight could leave resources allocated beyond the intended lifetime, constituting a resource‑leak weakness (CWE‑772). The CVE description does not explicitly state any denial of service or other consequence, therefore the precise impact is not declared in the official data.

Affected Systems

All Linux kernel releases that include the AFS networking implementation and have not yet integrated the commit that adds the charger‑cancellation logic (identified by the hash 47694fbc9d24…) are affected. The vulnerability targets the netns teardown code path under the AFS subsystem.

Risk and Exploitability

The CVSS score of 9.8 signals a high severity assessment, while the EPSS score of < 1% indicates a very low probability of public exploitation at present. It is not listed in the CISA KEV catalog. Based on the description, it is inferred that exploitation would likely require local or privileged access to create or delete AFS network namespaces, after which the lingering charger could consume kernel resources or impair networking operations.

Generated by OpenCVE AI on August 21, 2026 at 23:44 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply a Linux kernel update that includes the AFS netns teardown patch to cancel the preallocation charger.
  • If an immediate kernel update is not possible, avoid unnecessary deletion and recreation of AFS network namespaces during periods of heavy traffic, and monitor system logs for signs of resource exhaustion or failed work queue processing.
  • As a temporary measure, enable kernel tracing focus on the netns teardown routines to detect any stuck preallocation charger work items and intervene manually if resource usage rises unexpectedly.

Generated by OpenCVE AI on August 21, 2026 at 23:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 19 Aug 2026 12:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772
References
Metrics threat_severity

None

threat_severity

Moderate


Mon, 17 Aug 2026 12:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-682

Mon, 17 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}


Sat, 15 Aug 2026 14:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-682

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: afs: Fix netns teardown to cancel the preallocation charger Fix the teardown of an afs network namespace to make sure it cancels the work item that keeps the preallocated rxrpc call/conn/peer queue charged before incoming calls are disabled (i.e. listen 0). Also, if net->live is false because the afs netns is being deleted, make afs_charge_preallocation() skip charging and make afs_rx_new_call() avoid requeuing the charger. (This was found by AI review).
Title afs: Fix netns teardown to cancel the preallocation charger
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T05:47:02.011Z

Reserved: 2026-08-15T05:44:03.895Z

Link: CVE-2026-74427

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:44.810

Modified: 2026-08-17T06:19:38.237

Link: CVE-2026-74427

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-74427 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-21T23:45:03Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime