afs: Fix callback service message parsers to pass through -EAGAIN

Summary

In the Linux kernel, the following vulnerability has been resolved: afs: Fix callback service message parsers to pass through -EAGAIN The AFS filesystem client uses an rxrpc server to listen for callback notifications. Each callback call type handler has a delivery function that parses the incoming request stream, and this should return -EAGAIN the last packet hasn't yet been seen, but all currently queued received data is consumed. afs_extract_data() does this, but the -EAGAIN return is switched to 0 inadvertantly Fix callback service message parsers to pass through -EAGAIN

Timeline

1. Aug 15, 2026, 5:56 AM UTCCVE published
2. Oct 16, 2026, 6:48 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: yes · Technical impact: partial

3. Oct 16, 2026, 6:55 PM UTCRecord last updated

Affected versions

• Linux Linux

  From d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 · fixed in 26b737b3769e92493fe94c34620399d93ca231ae; From d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 · fixed in 09c67a7ded481482155b836c8c7f078a3075f8de; From d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 · fixed in 239cd337c9d047e7097f5b2ebbb41ddfb8180bc6; From d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 · fixed in 5a39b145a8fb49f316e7ec1f29ba51d68095c7e4; From d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 · fixed in 772850871a2e772e26f9d93f1e9ddd413b3eeaa4; From d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 · fixed in 0acbc09d2aca0432af45cec114f20d55ceafaec4; From d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 · fixed in f14dd036fad3d359f26f1282199cec06b3a9362b; From d001648ec7cf8b21ae9eec8b9ba4a18295adfb14 · fixed in 0f36469d7ce98b362934113c550d08bb0c784231

• Linux Linux

  4.9

• KernelLinux

  From 4.9.0 · fixed in 5.10.261; From 5.11.0 · fixed in 5.15.212; From 5.16.0 · fixed in 6.1.178; From 6.2.0 · fixed in 6.6.145; From 6.7.0 · fixed in 6.12.97; From 6.13.0 · fixed in 6.18.40; From 6.19.0 · fixed in 7.1.5

References 8