CVE-2026-74427: afs: Fix netns teardown to cancel the preallocation charger
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix netns teardown to cancel the preallocation charger
Fix the teardown of an afs network namespace to make sure it cancels the work item that keeps the preallocated rxrpc call/conn/peer queue charged before incoming calls are disabled (i.e. listen 0).
Also, if net->live is false because the afs netns is being deleted, make afschargepreallocation() skip charging and make afsrxnewcall() avoid requeuing the charger.
(This was found by AI review).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-74427?
CVE-2026-74427 has a severity rating of 12.
What systems are affected by CVE-2026-74427?
CVE-2026-74427 affects the Linux kernel's AFS network namespace functionality.
How do I fix CVE-2026-74427?
To fix CVE-2026-74427, update your Linux kernel to the latest version that includes the patch.
What are the potential impacts of CVE-2026-74427?
Exploitation of CVE-2026-74427 could lead to improper management of network resources in AFS namespaces.
Is CVE-2026-74427 a remote vulnerability?
CVE-2026-74427 can potentially be exploited remotely through affected AFS network namespace configurations.