Description
In the Linux kernel, the following vulnerability has been resolved:

afs: Fix missing kunmap in afs_dir_search_bucket()

Fix afs_dir_search_bucket() to kunmap the block it's using in the "bad:"
path.
Published: 2026-09-25
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Potential memory exhaustion and kernel instability
Action: Patch Kernel
AI Analysis

Impact

The kernel function afs_dir_search_bucket() fails to unmap memory when a lookup fails, leaving the page mapping resident. This omission can cause a leak of kernel resources, which may lead eventually to memory exhaustion or corruption of kernel structures. Based on the description, it is inferred that repeated failures may accumulate until system resources are depleted, resulting in a denial of service or instability.

Affected Systems

All Linux kernel builds that include the AFS filesystem before the commit that adds the kunmap call are potentially affected. This includes any distribution kernel that contains the legacy afs_dir_search_bucket() routine without the fix. Version specifics are not listed, but any unpatched kernel with the older AFS implementation is susceptible.

Risk and Exploitability

The vulnerability is local, affecting privileged or kernel-mode code that can trigger an AFS lookup. No public exploit has been disclosed. The CVSS score of 5.5 indicates moderate severity. The EPSS score is less than 1%, and the vulnerability is not in the CISA KEV catalog. Based on the description, it is inferred that the main risk is memory exhaustion leading to denial of service, with no known path to arbitrary code execution.

Generated by OpenCVE AI on October 1, 2026 at 11:21 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Update to a kernel version that includes the afs_dir_search_bucket() fix commit referenced in the advisory.
  • If an update cannot be performed, disable or remove the AFS filesystem from the kernel configuration or unmount the filesystem to prevent execution of the vulnerable code.
  • Restrict access to the AFS filesystem and monitor system logs for any failures that may indicate the vulnerability being triggered.

Generated by OpenCVE AI on October 1, 2026 at 11:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 01 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-391

Tue, 29 Sep 2026 13:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 25 Sep 2026 23:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-391

Fri, 25 Sep 2026 10:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing kunmap in afs_dir_search_bucket() Fix afs_dir_search_bucket() to kunmap the block it's using in the "bad:" path.
Title afs: Fix missing kunmap in afs_dir_search_bucket()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-19T09:09:49.898Z

Reserved: 2026-09-24T16:01:01.157Z

Link: CVE-2026-97586

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-25T11:17:09.770

Modified: 2026-10-19T10:17:28.023

Link: CVE-2026-97586

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-25T00:00:00Z

Links: CVE-2026-97586 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-01T11:30:05Z

Weaknesses
  • CWE-772

    Missing Release of Resource after Effective Lifetime