afs: Fix afs_edit_dir_remove() to get, not find, block 0 (Linux Linux)

CVE-2026-68168
Not available

At a glance

Source
NVD
EPSS
EPSS 0.20 % · percentile 10 ()
State
PUBLISHED
Published
Updated
Assigner
Linux
NVD status
Received

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix afs_edit_dir_remove() to get, not find, block 0 Fix afs_edit_dir_remove() to use afs_dir_get_block() to get block 0 rather than afs_dir_find_block() as the latter caches the found block in the afs_dir_iter and may[*] switch out the page it's on if another afs_dir_find_block() is done. This parallels what afs_edit_dir_add() does. [*] There's more than one block per page.

References

European references

CERT-FR advisories

Affected products

ProductVersions
Linux · Linuxaffected a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e < f2b293359924117736218701ebd8b40618d73e6f ; affected a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e < bfdfc7782ada6f3a4df7182889b66039f8e4131c ; affected a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e < 62d9853aa4ce6e9797b6949804891be14b219752
Linux · Linuxaffected 6.14 ; unaffected 0 < 6.14 ; unaffected 6.18.42 ≤ 6.18.* ; unaffected 7.1.6 ≤ 7.1.* ; unaffected 7.2 ≤ *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
CERT-FR (ANSSI)Licence Ouverte / Etalab 2.0
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD