In the Linux kernel, the following vulnerability has been resolved:

afs: fix NULL pointer dereference in afs_get_tree()

afs_alloc_sbi() uses kzalloc for memory allocation. And, if
ctx->dyn_root is not null, as->cell and as->volume are null.
In trace_afs_get_tree() they are dereferenced.

KASAN error message:

KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
CPU: 2 PID: 18478 Comm: syz-executor.7 Not tainted 5.10.246-syzkaller #0
Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1
04/01/2014
RIP: 0010:perf_trace_afs_get_tree+0x1d9/0x550
include/trace/events/afs.h:1365

Call Trace:
trace_afs_get_tree include/trace/events/afs.h:1365 [inline]
afs_get_tree+0x922/0x1350 fs/afs/super.c:599
vfs_get_tree+0x8e/0x300 fs/super.c:1572
do_new_mount fs/namespace.c:3011 [inline]
path_mount+0x14a5/0x2220 fs/namespace.c:3341
do_mount fs/namespace.c:3354 [inline]
__do_sys_mount fs/namespace.c:3562 [inline]
__se_sys_mount fs/namespace.c:3539 [inline]
__x64_sys_mount+0x283/0x300 fs/namespace.c:3539
do_syscall_64+0x33/0x50 arch/x86/entry/common.c:46
entry_SYSCALL_64_after_hwframe+0x67/0xd1

Found by Linux Verification Center (linuxtesting.org) with Syzkaller.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
80548b03991f58758a336424a90bf9f988e3b077 affected < 67fb48c4a0874953212321cd5d57fdb4900dbc31
80548b03991f58758a336424a90bf9f988e3b077 affected < d648cc2069eb081707c061849046d909f57c78b1
80548b03991f58758a336424a90bf9f988e3b077 affected < d5b17474feed3c30991f07affa2473adbad95055
80548b03991f58758a336424a90bf9f988e3b077 affected < 867b3ea146a041023bfcd258e6db516b1bb28f19
80548b03991f58758a336424a90bf9f988e3b077 affected < ea19edf71721cd42f923e3c70f4ff995b422fe3b
80548b03991f58758a336424a90bf9f988e3b077 affected < 23b3d457d8387bcb2a61063a9e520063ada9335f
80548b03991f58758a336424a90bf9f988e3b077 affected < 70b2842734d831c908474779bb8a76daf55f782c
80548b03991f58758a336424a90bf9f988e3b077 affected < 0b70716081c6462be9b2928ad736d0d527b09678
Linux Linux affected
Version Status Constraints
5.2 affected —
0 unaffected < 5.2
5.10.261 unaffected ≤ 5.10.*
5.15.212 unaffected ≤ 5.15.*
6.1.178 unaffected ≤ 6.1.*
6.6.145 unaffected ≤ 6.6.*
6.12.97 unaffected ≤ 6.12.*
6.18.40 unaffected ≤ 6.18.*
7.1.5 unaffected ≤ 7.1.*
7.2-rc2 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0b70716081c6462be9b2928ad736d0d527b09678 cve-icon cve-icon
https://git.kernel.org/stable/c/23b3d457d8387bcb2a61063a9e520063ada9335f cve-icon cve-icon
https://git.kernel.org/stable/c/67fb48c4a0874953212321cd5d57fdb4900dbc31 cve-icon cve-icon
https://git.kernel.org/stable/c/70b2842734d831c908474779bb8a76daf55f782c cve-icon cve-icon
https://git.kernel.org/stable/c/867b3ea146a041023bfcd258e6db516b1bb28f19 cve-icon cve-icon
https://git.kernel.org/stable/c/d5b17474feed3c30991f07affa2473adbad95055 cve-icon cve-icon
https://git.kernel.org/stable/c/d648cc2069eb081707c061849046d909f57c78b1 cve-icon cve-icon
https://git.kernel.org/stable/c/ea19edf71721cd42f923e3c70f4ff995b422fe3b cve-icon cve-icon
History

Sat, 15 Aug 2026 06:15:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: afs: fix NULL pointer dereference in afs_get_tree() afs_alloc_sbi() uses kzalloc for memory allocation. And, if ctx->dyn_root is not null, as->cell and as->volume are null. In trace_afs_get_tree() they are dereferenced. KASAN error message: KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] CPU: 2 PID: 18478 Comm: syz-executor.7 Not tainted 5.10.246-syzkaller #0 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 RIP: 0010:perf_trace_afs_get_tree+0x1d9/0x550 include/trace/events/afs.h:1365 Call Trace: trace_afs_get_tree include/trace/events/afs.h:1365 [inline] afs_get_tree+0x922/0x1350 fs/afs/super.c:599 vfs_get_tree+0x8e/0x300 fs/super.c:1572 do_new_mount fs/namespace.c:3011 [inline] path_mount+0x14a5/0x2220 fs/namespace.c:3341 do_mount fs/namespace.c:3354 [inline] __do_sys_mount fs/namespace.c:3562 [inline] __se_sys_mount fs/namespace.c:3539 [inline] __x64_sys_mount+0x283/0x300 fs/namespace.c:3539 do_syscall_64+0x33/0x50 arch/x86/entry/common.c:46 entry_SYSCALL_64_after_hwframe+0x67/0xd1 Found by Linux Verification Center (linuxtesting.org) with Syzkaller.
Title afs: fix NULL pointer dereference in afs_get_tree()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-15T05:59:28.427Z

Reserved: 2026-08-15T05:44:03.894Z

Link: CVE-2026-74426

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:44.690

Modified: 2026-08-15T06:22:44.690

Link: CVE-2026-74426

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.