CVE-2026-74425

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> afs: handle CB.InitCallBackState3 requests without a server record<br /> <br /> The cache manager callback path now attaches the server record to an<br /> incoming call through the rxrpc peer&amp;#39;s app data. That association is<br /> not guaranteed to exist for every callback request, and most callback<br /> handlers already tolerate that case.<br /> <br /> Make CB.InitCallBackState3 follow the same pattern by checking whether a<br /> server record was attached before using it. If the peer is not mapped<br /> to a server record, trace the request and ignore it, matching the<br /> existing behaviour for other unmatched callback requests.<br /> <br /> This keeps the callback handler consistent with the rest of the cache<br /> manager service and avoids depending on peer state that may not be<br /> available for a given request.