CVE-2026-80885: afs: Fix uncancelled rxrpc OOB message handler
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix uncancelled rxrpc OOB message handler
Fix AFS to cancel its OOB message processing (typically to respond to security challenges). Also move OOB message processing to afswq so that it's also waited for and make the OOB handler just return if the net namespace is no longer live.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Modify AFS so it cancels its OOB message processing and moves OOB message processing to afs_wq; update the OOB handler to just return when the net namespace is no longer live, and ensure the handler is waited for/fully drained before continuing to avoid uncancelled rxrpc OOB handling.
AFS (rxrpc OOB message processing) OOB message processing workqueue/handler = Move OOB message processing to afs_wq; cancel OOB message processing; in the handler, return if the net namespace is no longer live
Event History
Frequently Asked Questions
Which systems are affected by this issue?
The issue affects Linux kernel systems using AFS and its RxRPC out-of-band message processing. The provided information does not identify specific kernel versions or configurations.
What mitigation is available if an update cannot be applied immediately?
No temporary mitigation or workaround is provided. The referenced resolution cancels AFS OOB processing, moves that processing to afs_wq, and stops the handler when the network namespace is no longer live.
How can I determine whether my system has the fix?
Check whether your kernel includes the changes referenced by commits 231414253b648b3518b56f09710b831945d6a2fc, d14e96ddd616c8a9fff3b5bab3bf4af0cfc30ec4, or a4057e58b07005d0fe0491bdbf1868c1491909ee. The supplied data does not provide affected or fixed release version numbers.