CVE-2026-72374

Summary

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix callback service message parsers to pass through -EAGAIN

The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incoming request stream, and this should return -EAGAIN the last packet hasn't yet been seen, but all currently queued received data is consumed. afs_extract_data() does this, but the -EAGAIN return is switched to 0 inadvertantly

Fix callback service message parsers to pass through -EAGAIN

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxd001648ec7cf8b21ae9eec8b9ba4a18295adfb14 < 26b737b3769e92493fe94c34620399d93ca231aeaffected
LinuxLinuxd001648ec7cf8b21ae9eec8b9ba4a18295adfb14 < 09c67a7ded481482155b836c8c7f078a3075f8deaffected
LinuxLinuxd001648ec7cf8b21ae9eec8b9ba4a18295adfb14 < 239cd337c9d047e7097f5b2ebbb41ddfb8180bc6affected
LinuxLinuxd001648ec7cf8b21ae9eec8b9ba4a18295adfb14 < 5a39b145a8fb49f316e7ec1f29ba51d68095c7e4affected
LinuxLinuxd001648ec7cf8b21ae9eec8b9ba4a18295adfb14 < 772850871a2e772e26f9d93f1e9ddd413b3eeaa4affected
LinuxLinuxd001648ec7cf8b21ae9eec8b9ba4a18295adfb14 < 0acbc09d2aca0432af45cec114f20d55ceafaec4affected
LinuxLinuxd001648ec7cf8b21ae9eec8b9ba4a18295adfb14 < f14dd036fad3d359f26f1282199cec06b3a9362baffected
LinuxLinuxd001648ec7cf8b21ae9eec8b9ba4a18295adfb14 < 0f36469d7ce98b362934113c550d08bb0c784231affected
LinuxLinux4.9affected
LinuxLinux0 < 4.9unaffected
LinuxLinux5.10.261 <= 5.10.*unaffected
LinuxLinux5.15.212 <= 5.15.*unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References