CVE-2026-80877: afs: Fix vllist leak
Published Sep 4, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix vllist leak
Fix a leak of the new vllist in afsupdatecell() in the event that it is an empty list (nrservers == 0), in which case the old list isn't displaced unless the old list is also empty.
Affected Software
1 affected component
Linux Kernel
Event History
Sep 4, 2026
CVE Published
via MITRE·04:48 PM
Data Sourced
via MITRE·04:48 PM
Description
Data Sourced
via NVD·05:16 PM
Description
Frequently Asked Questions
1
Under what condition does the memory leak occur?
The leak occurs in afs_update_cell() when a newly created vllist is empty, meaning nr_servers is 0, and the existing list is not also empty.
2
What component is affected?
The affected component is AFS support in the Linux kernel, specifically the vllist handling performed by afs_update_cell().