CVEvulnerability
CVE-2026-72366
9.8 CRITICAL
Official page ↗
- Status
- Received
- Published
- 2026-08-15
- Last modified
- 2026-10-21
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 (416baaa9-dc9f-4396-8d5f-8c081fb06d67)
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix netfs_create_write_req() to handle async cache object creation
netfs_create_write_req() will skip caching if the fscache cookie is
disabled, but this is a problem because async cache object creation might
not have got far enough yet that has been enabled - thereby causing the
call to fscache_begin_write_operation() to be skipped.
Fix this by removing the checks on the cookie and delegating this to
fscache_begin_write_operation().
References
- https://git.kernel.org/stable/c/1188a9846fadeacf9d1430b528e5217f749d665b git.kernel.org
- https://git.kernel.org/stable/c/8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a git.kernel.org
- https://git.kernel.org/stable/c/aee03fbc8803a40d65e20f1af816a7219048a426 git.kernel.org
- https://git.kernel.org/stable/c/dbd6f56d975b23241b7bbb11bb8f562af548a0aa git.kernel.org