CVE-2026-68168afs: Fix afs_edit_dir_remove() to get, not find, block 0
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: afs: Fix afs_edit_dir_remove() to get, not find, block 0 Fix afs_edit_dir_remove() to use afs_dir_get_block() to get block 0 rather than afs_dir_find_block() as the latter caches the found block in the afs_dir_iter and may[*] switch out the page it's on if another afs_dir_find_block() is done. This parallels what afs_edit_dir_add() does. [*] There's more than one block per page.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 17, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e before f2b293359924117736218701ebd8b40618d73e6f; from a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e before bfdfc7782ada6f3a4df7182889b66039f8e4131c; from a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e before 62d9853aa4ce6e9797b6949804891be14b219752 | CNA record |
References
- https://git.kernel.org/stable/c/f2b293359924117736218701ebd8b40618d73e6f
- https://git.kernel.org/stable/c/bfdfc7782ada6f3a4df7182889b66039f8e4131c
- https://git.kernel.org/stable/c/62d9853aa4ce6e9797b6949804891be14b219752
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.