---
id: CVE-2026-80878
title: 'afs: Fix leak of ungot volume'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  afs: Fix leak of ungot volume

  Fix afs_lookup_volume_rcu() so that it doesn't leak a dying volume if
  afs_try_get_volume() fails.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 32222f09782f1894fcfc37f6505ca676a6f4d1d6 <
    7d10cfec6cbce7396ed5cf6abd8c34bae09c393b
  - >-
    Linux >= 32222f09782f1894fcfc37f6505ca676a6f4d1d6 <
    78e8ee25a5e8f2eb85bbabbeb15c8a2445b4a67f
  - >-
    Linux >= 32222f09782f1894fcfc37f6505ca676a6f4d1d6 <
    9cabf1c86948793fbad09023bd2ec58c71b9c1d4
  - >-
    Linux >= 32222f09782f1894fcfc37f6505ca676a6f4d1d6 <
    d672c276f685a540ed2b2a8bafaed4650a89022c
  - Linux 6.8
published: '2026-09-04'
updated: '2026-09-14'
sourceUpdated: '2026-09-14T11:58:51.486Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-80878'
references:
  - url: 'https://git.kernel.org/stable/c/7d10cfec6cbce7396ed5cf6abd8c34bae09c393b'
  - url: 'https://git.kernel.org/stable/c/78e8ee25a5e8f2eb85bbabbeb15c8a2445b4a67f'
  - url: 'https://git.kernel.org/stable/c/9cabf1c86948793fbad09023bd2ec58c71b9c1d4'
  - url: 'https://git.kernel.org/stable/c/d672c276f685a540ed2b2a8bafaed4650a89022c'
tags:
  - cve.org
epss: 0.00209
epssPercentile: 0.09792
ingestedAt: '2026-09-14T15:23:07.456Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix leak of ungot volume

Fix afs_lookup_volume_rcu() so that it doesn't leak a dying volume if
afs_try_get_volume() fails.

## Affected

- `Linux >= 32222f09782f1894fcfc37f6505ca676a6f4d1d6 < 7d10cfec6cbce7396ed5cf6abd8c34bae09c393b`
- `Linux >= 32222f09782f1894fcfc37f6505ca676a6f4d1d6 < 78e8ee25a5e8f2eb85bbabbeb15c8a2445b4a67f`
- `Linux >= 32222f09782f1894fcfc37f6505ca676a6f4d1d6 < 9cabf1c86948793fbad09023bd2ec58c71b9c1d4`
- `Linux >= 32222f09782f1894fcfc37f6505ca676a6f4d1d6 < d672c276f685a540ed2b2a8bafaed4650a89022c`
- `Linux 6.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.