Memory Leak in Linux Kernel's AFS Update Cell Functionality

CVE-2026-80877

What is CVE-2026-80877?

A vulnerability exists in the Linux kernel's implementation of the AFS protocol, specifically in the afs_update_cell() function. When attempting to update the cell list, a failure to properly displace an old vllist can result in a memory leak, particularly when the updated list is empty. This leak may persist due to improper handling of server counts, leading to potential resource management issues. It is essential for administrators using affected kernel versions to apply available patches to mitigate the risk of memory consumption and ensure system stability.

References