Strix
56.5K

CVE-2026-72373

HIGHCVSS 7.5/10EPSS 0.21%

Last modified

CVE-2026-72373 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_some_callbacks() Fix afs_break_some_callbacks() to check to see if afs_lookup_volume_rcu() returned NULL (e.g. the specified volume is unknown).. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_some_callbacks() Fix afs_break_some_callbacks() to check to see if afs_lookup_volume_rcu() returned NULL (e.g. the specified volume is unknown).

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.21%

11.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 8230fd8217b7ea76f838ae88e4a5a8e54f37099f, < a99a617701186dc68c7b330d35fc2253f48e2ab2; >= 8230fd8217b7ea76f838ae88e4a5a8e54f37099f, < 5492799ec5d27be3bd454dcaf046bc7054f637ae; >= 8230fd8217b7ea76f838ae88e4a5a8e54f37099f, < e3e59ff22a0de01ed0cf3a3e25558811abc3b70a; >= 8230fd8217b7ea76f838ae88e4a5a8e54f37099f, < 794a01110390c1b76f59ece773fb0fbfd89c6f5c
LinuxLinux5.8

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72373?
In the Linux kernel, the following vulnerability has been resolved: afs: Fix missing NULL pointer check in afs_break_some_callbacks() Fix afs_break_some_callbacks() to check to see if afs_lookup_volume_rcu() returned NULL (e.g. the specified volume is unknown).
How severe is CVE-2026-72373?
CVE-2026-72373 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72373?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72373?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST