Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-97584

afs: Fix incorrect free in candidate cleanup in afs_lookup_server()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Fix afs_lookup_server() to not free an existing server's endpoint state when cleaning up a candidate server. The candidate record doesn't have an endpoint state yet at this point, so the free for that can just be removed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • d6aa05cd995830f6dcee7b139335edb266de38a6 to < 981d72663dee2fa6efaf202293e68d2b10a0d1d4affected
  • 4882ba78574e2d8c579658f65f6784b0d139d173 to < e5bc0fa9959dc8f7eb1afab7c039594a16a1a65caffected
  • 4882ba78574e2d8c579658f65f6784b0d139d173 to < 349e713039a1fd6659c27e7a66238bfa49ce37e9affected
  • 4882ba78574e2d8c579658f65f6784b0d139d173 to < 044d596094af4b769fb8e1173dff0d08bd68db6caffected
  • 6.12.101 to < 6.12.111affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.12.111 to ≤ 6.12.*unaffected
  • 6.18.53 to ≤ 6.18.*unaffected
  • 7.2.7 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References