CVE-2026-97584

A flaw was found in the Linux kernel's AFS Andrew File System subsystem. During server lookup operations, the candidate cleanup routine incorrectly frees memory associated with an existing server's endpoint state. A local user interacting with the filesystem could exploit this issue to trigger...

CVE-2026-80878 afs: Fix leak of ungot volume

In the Linux kernel, the following vulnerability has been resolved: afs: Fix leak of ungot volume Fix afslookupvolumercu so that it doesn't leak a dying volume if afstrygetvolume fails...

UBUNTU-CVE-2026-72375

In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular -lockwork It seems that initalising afsvnode::lockwork a single time in the slab's init function isn't sufficient for workstructs. This results in the DEBUGOBJECTS debugging...

CVE-2025-21809 rxrpc, afs: Fix peer hash locking vs RCU callback

In the Linux kernel, the following vulnerability has been resolved: rxrpc, afs: Fix peer hash locking vs RCU callback In its address list, afs now retains pointers to and refs on one or more rxrpcpeer objects. The address list is freed under RCU and at this time, it puts the refs on those peers...