CVE-2026-68168 PUBLISHED

afs: Fix afs_edit_dir_remove() to get, not find, block 0

Assigner: Linux
Reserved: 30.07.2026 Published: 10.08.2026 Updated: 10.08.2026

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix afs_edit_dir_remove() to get, not find, block 0

Fix afs_edit_dir_remove() to use afs_dir_get_block() to get block 0 rather than afs_dir_find_block() as the latter caches the found block in the afs_dir_iter and may[*] switch out the page it's on if another afs_dir_find_block() is done. This parallels what afs_edit_dir_add() does.

[*] There's more than one block per page.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e to f2b293359924117736218701ebd8b40618d73e6f (excl.)
  • affected from a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e to bfdfc7782ada6f3a4df7182889b66039f8e4131c (excl.)
  • affected from a5b5beebcf96d5e8a2fc79856c2ac1e93f82478e to 62d9853aa4ce6e9797b6949804891be14b219752 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.14 is affected
  • unaffected from 0 to 6.14 (excl.)
  • unaffected from 6.18.42 to 6.18.* (incl.)
  • unaffected from 7.1.6 to 7.1.* (incl.)
  • unaffected from 7.2-rc5 to * (incl.)

References