Null Pointer Dereference Vulnerability in Linux Kernel AFS Module

CVE-2026-74426

What is CVE-2026-74426?

A vulnerability exists in the AFS module of the Linux kernel that may lead to a null pointer dereference. This occurs when a memory allocation failure is not adequately handled, resulting in dereferencing null pointers. Such issues can compromise system integrity and stability. The error, identified during testing, specifically happens in the afs_get_tree() function, where dereferencing occurs if certain context variables are null. This vulnerability was discovered by the Linux Verification Center using Syzkaller, highlighting the need for proactive fixes to maintain system reliability.

References