{"id":"CVE-2026-72366","title":"netfs: Fix netfs_create_write_req() to handle async cache object creation","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix netfs_create_write_req() to handle async cache object creation\n\nnetfs_create_write_req() will skip caching if the fscache cookie is\ndisabled, but this is a p…","severity":"critical","cvss":9.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","vendor":"Linux","product":"Linux","affected":["Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < aee03fbc8803a40d65e20f1af816a7219048a426","Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a","Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 1188a9846fadeacf9d1430b528e5217f749d665b","Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < dbd6f56d975b23241b7bbb11bb8f562af548a0aa","Linux 6.11"],"published":"2026-08-15","updated":"2026-10-21","sourceUpdated":"2026-10-21T12:44:41.841Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-72366","references":[{"url":"https://git.kernel.org/stable/c/aee03fbc8803a40d65e20f1af816a7219048a426"},{"url":"https://git.kernel.org/stable/c/8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a"},{"url":"https://git.kernel.org/stable/c/1188a9846fadeacf9d1430b528e5217f749d665b"},{"url":"https://git.kernel.org/stable/c/dbd6f56d975b23241b7bbb11bb8f562af548a0aa"}],"tags":["cve.org"],"epss":0.00649,"epssPercentile":0.50215,"ingestedAt":"2026-10-21T12:48:53.591Z","slug":"CVE-2026-72366","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix netfs_create_write_req() to handle async cache object creation\n\nnetfs_create_write_req() will skip caching if the fscache cookie is\ndisabled, but this is a problem because async cache object creation might\nnot have got far enough yet that has been enabled - thereby causing the\ncall to fscache_begin_write_operation() to be skipped.\n\nFix this by removing the checks on the cookie and delegating this to\nfscache_begin_write_operation().\n\n## Affected\n\n- `Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < aee03fbc8803a40d65e20f1af816a7219048a426`\n- `Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a`\n- `Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 1188a9846fadeacf9d1430b528e5217f749d665b`\n- `Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < dbd6f56d975b23241b7bbb11bb8f562af548a0aa`\n- `Linux 6.11`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"midnight","depthScore":54,"depthScoreParts":{"impact":53.9,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}