CVE-2026-72366

CVE-2026-72366

Critical · published August 15, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix netfs_create_write_req() to handle async cache object creation

netfs_create_write_req() will skip caching if the fscache cookie is

disabled, but this is a problem because async cache object creation might

not have got far enough yet that has been enabled - thereby causing the

call to fscache_begin_write_operation() to be skipped.

Fix this by removing the checks on the cookie and delegating this to

fscache_begin_write_operation().

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00671 · 51.4th percentile
Published
2026-08-15T10:22Z
References (4)
EPSS history
Timeline
  • 15 AUG 05:56Z
    netfs: Fix netfs_create_write_req() to handle async cache object creation
    cvelistv5