SB2026081613 - Improper Initialization in Linux kernel afs
Published: August 16, 2026
Security Bulletin ID
SB2026081613
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Local access
Highest impact
Denial of service
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Improper Initialization (CVE-ID: CVE-2026-72375)
CWE-ID: CWE-665 - Improper Initialization
CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper initialization in afs_vnode lock_work handling when processing file locking operations on AFS inodes. A local user can trigger lock operations on a reused inode to cause a denial of service.
The issue can lead to kernel warnings from debug object handling, and the affected work item may still be running during inode eviction.
Remediation
Install update from vendor's website.