CVE-2026-72374

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The AFS filesystem client utilizes an rxrpc server to monitor callback notifications. Within this process, each callback call type handler employs a delivery function to parse the incoming request stream. This function is intended to return -EAGAIN when all currently queued received data is consumed but the final packet has not yet been encountered. However, the afs extract data() function inadvertently converts the -EAGAIN return value to 0.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.