In the Linux kernel, the following vulnerability has been resolved:

afs: Fix callback service message parsers to pass through -EAGAIN

The AFS filesystem client uses an rxrpc server to listen for callback
notifications. Each callback call type handler has a delivery function
that parses the incoming request stream, and this should return -EAGAIN the
last packet hasn't yet been seen, but all currently queued received data is
consumed. afs_extract_data() does this, but the -EAGAIN return is switched
to 0 inadvertantly

Fix callback service message parsers to pass through -EAGAIN

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0022.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 affected < 26b737b3769e92493fe94c34620399d93ca231ae
d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 affected < 09c67a7ded481482155b836c8c7f078a3075f8de
d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 affected < 239cd337c9d047e7097f5b2ebbb41ddfb8180bc6
d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 affected < 5a39b145a8fb49f316e7ec1f29ba51d68095c7e4
d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 affected < 772850871a2e772e26f9d93f1e9ddd413b3eeaa4
d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 affected < 0acbc09d2aca0432af45cec114f20d55ceafaec4
d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 affected < f14dd036fad3d359f26f1282199cec06b3a9362b
d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 affected < 0f36469d7ce98b362934113c550d08bb0c784231
Linux Linux affected
Version Status Constraints
4.9 affected —
0 unaffected < 4.9
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc2 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/09c67a7ded481482155b836c8c7f078a3075f8de cve-icon cve-icon
https://git.kernel.org/stable/c/0acbc09d2aca0432af45cec114f20d55ceafaec4 cve-icon cve-icon
https://git.kernel.org/stable/c/0f36469d7ce98b362934113c550d08bb0c784231 cve-icon cve-icon
https://git.kernel.org/stable/c/239cd337c9d047e7097f5b2ebbb41ddfb8180bc6 cve-icon cve-icon
https://git.kernel.org/stable/c/26b737b3769e92493fe94c34620399d93ca231ae cve-icon cve-icon
https://git.kernel.org/stable/c/5a39b145a8fb49f316e7ec1f29ba51d68095c7e4 cve-icon cve-icon
https://git.kernel.org/stable/c/772850871a2e772e26f9d93f1e9ddd413b3eeaa4 cve-icon cve-icon
https://git.kernel.org/stable/c/f14dd036fad3d359f26f1282199cec06b3a9362b cve-icon cve-icon
History

Sat, 15 Aug 2026 11:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-665
CWE-730

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incoming request stream, and this should return -EAGAIN the last packet hasn't yet been seen, but all currently queued received data is consumed. afs_extract_data() does this, but the -EAGAIN return is switched to 0 inadvertantly Fix callback service message parsers to pass through -EAGAIN
Title afs: Fix callback service message parsers to pass through -EAGAIN
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:56:09.182Z

Reserved: 2026-08-09T03:40:39.922Z

Link: CVE-2026-72374

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:10.873

Modified: 2026-08-15T06:22:10.873

Link: CVE-2026-72374

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-15T11:30:07Z

Weaknesses