Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-97584

In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in…

Risk score
58/100
CVSS
7.8 v3.1
Exploit chance (30 days)
0.2%
Published
25 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is
In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Fix afs_lookup_server() to not free an existing server's endpoint state when cleaning up a candidate server. The candidate record doesn't have an endpoint state yet at this point, so …
Affected
See advisory
Fix
Apply the vendor's security update; see the linked advisory.
Exploitation
No known exploitation

Why it is Yellow

  • CVSS 7.8 high
  • On your watchlist: linux kernel

References

Original description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix incorrect free in candidate cleanup in afs_lookup_server() Fix afs_lookup_server() to not free an existing server's endpoint state when cleaning up a candidate server. The candidate record doesn't have an endpoint state yet at this point, so the free for that can just be removed.

Last activity 25 Sep 2026. Patch Forecast updates every hour.