{"schema":"threatline.record/2","record":{"id":"CVE-2026-97584","aliases":[],"summary":"afs: Fix incorrect free in candidate cleanup in afs_lookup_server()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nafs: Fix incorrect free in candidate cleanup in afs_lookup_server()\n\nFix afs_lookup_server() to not free an existing server's endpoint state\nwhen cleaning up a candidate server.  The candidate record doesn't have an\nendpoint state yet at this point, so the free for that can just be removed.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97584","source_modified_at":"2026-10-19T09:09:47.944Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"d6aa05cd995830f6dcee7b139335edb266de38a6","lessThan":"981d72663dee2fa6efaf202293e68d2b10a0d1d4","status":"affected","versionType":"git"},{"version":"4882ba78574e2d8c579658f65f6784b0d139d173","lessThan":"e5bc0fa9959dc8f7eb1afab7c039594a16a1a65c","status":"affected","versionType":"git"},{"version":"4882ba78574e2d8c579658f65f6784b0d139d173","lessThan":"349e713039a1fd6659c27e7a66238bfa49ce37e9","status":"affected","versionType":"git"},{"version":"4882ba78574e2d8c579658f65f6784b0d139d173","lessThan":"044d596094af4b769fb8e1173dff0d08bd68db6c","status":"affected","versionType":"git"},{"version":"6.12.101","lessThan":"6.12.111","status":"affected","versionType":"semver"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97584","source_modified_at":"2026-10-19T09:09:47.944Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.15","status":"affected"},{"version":"0","lessThan":"6.15","status":"unaffected","versionType":"semver"},{"version":"6.12.111","lessThanOrEqual":"6.12.*","status":"unaffected","versionType":"semver"},{"version":"6.18.53","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.7","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97584","source_modified_at":"2026-10-19T09:09:47.944Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"981d72663dee2fa6efaf202293e68d2b10a0d1d4","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97584","source_modified_at":"2026-10-19T09:09:47.944Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"349e713039a1fd6659c27e7a66238bfa49ce37e9","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97584","source_modified_at":"2026-10-19T09:09:47.944Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"044d596094af4b769fb8e1173dff0d08bd68db6c","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-97584","source_modified_at":"2026-10-19T09:09:47.944Z","fetched_at":"2026-10-23T18:45:31.882637Z","package":{"name":"Linux","ecosystem":null},"version":"6.12.111","basis":"first unaffected version stated in the CVE record"}],"cvss":7.8,"severity":"High","kev":{"listed":false},"epss":{"probability":0.00163,"percentile":0.05237,"score_date":"2026-10-23"},"published_at":"2026-09-25T10:22:04.322Z","modified_at":"2026-10-19T09:09:47.944Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-97584","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-19T09:09:47.944Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-97584","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/981d72663dee2fa6efaf202293e68d2b10a0d1d4"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/e5bc0fa9959dc8f7eb1afab7c039594a16a1a65c"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/349e713039a1fd6659c27e7a66238bfa49ce37e9"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/044d596094af4b769fb8e1173dff0d08bd68db6c"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-19T09:09:47.944Z","content_hash":"5b6f359dbc20f338a9287bb5b321817d03423aa1e9eb0d838e77cb8caf5b2fa2"}}