CVE-2026-74427

A flaw was found in the AFS (Andrew File System) component of the Linux kernel. During the teardown of an AFS network namespace, a work item responsible for managing preallocated resources (rxrpc call/connection/peer queue) may not be properly canceled. This improper resource handling could lead to a resource leak, potentially resulting in a Denial of Service (DoS) due to resource exhaustion.

A moderate-impact flaw was found in the AFS (Andrew File System) implementation of the Linux kernel. During the teardown of an afs network namespace, the work item that keeps the preallocated rxrpc call/connection/peer queue charged may not be canceled before incoming calls are disabled, and charging may continue or be requeued while the namespace is being deleted. A local user with privileges to create and destroy network namespaces could exploit this improper resource handling to leak kernel resources, potentially causing a denial of service through resource exhaustion. There is no impact on confidentiality or integrity. In Red Hat's assessment, this flaw affects the kernel and kernel-rt components of Red Hat Enterprise Linux 9 and 10 and the kernel components of Red Hat In-Vehicle OS 2; the fix is currently deferred for these products, so no updated packages are available at this time, and the residual risk is limited to local denial of service via resource exhaustion. Red Hat Enterprise Linux 6, 7, and 8 are not affected because the vulnerable code is not present in those releases. Red Hat rates this flaw as Moderate severity (CVSS 5.5, CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H), which differs significantly from the Critical severity in the upstream CVE record; the upstream score does not reflect the actual attack requirements, as exploitation requires local access and affects only availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.