CVE-2026-68168

A flaw was found in the Linux kernel's Andrew File System (AFS) component. The system's directory removal function, afs_edit_dir_remove(), incorrectly manages memory blocks, specifically block 0. This improper handling could lead to an unstable system state or data integrity issues during directory operations.

This vulnerability is rated as Moderate severity because it is confined to a local denial of service condition and cannot be exploited remotely or used directly to escalate privileges. The Andrew File System (AFS) client is not configured or mounted by default in typical Red Hat Enterprise Linux environments. An attacker must possess local system access and perform directory removal operations on an already mounted AFS filesystem to trigger the defect.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.