CVE-2026-72356

CVE-2026-72356

High · published August 15, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
49.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix missing credit release on failure in cifs_issue_read()

Fix missing release of credits in the failure path in cifs_issue_read()

lest retrying the subreq just overwrites the credits value.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00630 · 49.5th percentile
Published
2026-08-15T10:22Z
References (4)
https://git.kernel.org/stable/c/3a303f985c6bec8787c2ad4a16b39c14c5bcd765 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/86652704a7fd41a5a8459027e08640bbd1952826 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/b9ee1f0347bf56d019ca28ddff090234bb45b05c · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c16b8c4cfb4fe2244cc33e469a93c1ab8684146b · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 15 AUG 05:55Z
    cifs: Fix missing credit release on failure in cifs_issue_read()
    cvelistv5