Denial of Service in Linux Kernel Autofs Component

CVE-2026-99181

What is CVE-2026-99181?

A vulnerability in the Linux kernel's autofs service allows for a Denial of Service condition during legitimate daemon restarts. Specifically, the autofs_notify_daemon function improperly handles notification errors when a replacement pipe is installed, potentially leading to a stalled service. This issue arises when a blocked write occurs concurrently with a pipe replacement, impacting the superblock state and causing failures during subsequent lookups. Fortunately, the vulnerability does not facilitate memory corruption, information leaks, privilege escalation, or execute arbitrary code.

References