CVE-2026-72373 in Linux
Summary
by MITRE • 08/15/2026
In the Linux kernel, the following vulnerability has been resolved:
afs: Fix missing NULL pointer check in afs_break_some_callbacks()
Fix afs_break_some_callbacks() to check to see if afs_lookup_volume_rcu() returned NULL (e.g. the specified volume is unknown).
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 08/15/2026
The vulnerability identified in the Linux kernel's afs subsystem represents a critical null pointer dereference flaw that could lead to system instability and potential privilege escalation. This issue specifically affects the afs_break_some_callbacks() function which fails to properly validate the return value from afs_lookup_volume_rcu(). When the volume lookup operation returns NULL due to an unknown or non-existent volume specification, the calling function proceeds without proper null checking, creating a dangerous condition where a null pointer is dereferenced during callback breaking operations. The flaw exists within the Andrew File System implementation that provides distributed file services in Linux environments.
The technical nature of this vulnerability aligns with CWE-476 which describes NULL Pointer Dereference, a common class of software defects that occurs when a program attempts to access memory through a pointer that has not been initialized or has been set to NULL. This particular implementation flaw demonstrates poor defensive programming practices where the return value from a potentially failing operation is not validated before subsequent processing. The afs_lookup_volume_rcu() function serves as a critical lookup mechanism for volume identification within the AFS subsystem, and its failure to return valid volume information creates a cascade of potential failures when downstream functions assume the returned value will be non-null.
Operational impact of this vulnerability extends beyond simple system crashes to potentially enable denial of service conditions that could affect file access services in distributed environments. When an attacker can trigger the specific condition where afs_lookup_volume_rcu() returns NULL, they may be able to force kernel panics or system reboots through controlled null pointer dereference scenarios. The vulnerability is particularly concerning in enterprise environments where AFS is commonly deployed for large-scale file sharing and collaboration services. System administrators may observe unexpected service interruptions or kernel oops messages when this condition occurs during normal file access operations, potentially leading to significant downtime and data accessibility issues.
The fix implemented addresses the core issue by introducing proper null pointer validation within the afs_break_some_callbacks() function before proceeding with callback breaking operations. This remediation follows established security practices for defensive programming and aligns with ATT&CK technique T1068 which describes privilege escalation through kernel vulnerabilities. The solution ensures that when volume lookup fails and returns NULL, the calling function properly handles this condition rather than attempting to dereference a null pointer. System administrators should prioritize applying this kernel patch across all systems running AFS services, particularly those in production environments where reliability and uptime are critical. The remediation process involves updating the kernel to include the proper validation check that prevents the null pointer dereference from occurring during volume callback operations.