CVE-2026-72371

CVE-2026-72371

High · published August 15, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix the volume AFS_VOLUME_RM_TREE is set on

Fix afs_insert_volume_into_cell() to set AFS_VOLUME_RM_TREE on the volume

replaced, not the new volume, as it's now removed from the cell's volume

tree. This will cause the old volume to be removed from the tree twice and

the new volume never to be removed.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.7th percentile
Published
2026-08-15T10:22Z
References (7)
https://git.kernel.org/stable/c/158c5a0b1dfc0e6a419efe18404047a4d2dff59e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1607075220cf57161d9116512994c159eacefc0d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/56b4e4b26f84411d880f968a539207b0a8889c8c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/6fa9a8a73e16aa22fce6e41cc00d59c767f0a540 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c421bc6b957e56e45e12dbaeaf70a60db20d6465 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d0c8ad418b47891a03426c5e02ebb0537f8d68f8 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d154c20837f379343f192d4b8d9dd4ef145562e6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:56Z
    afs: Fix the volume AFS_VOLUME_RM_TREE is set on
    cvelistv5