CVE-2026-72366Critical· 9.8▾ Midnight

netfs: Fix netfs_create_write_req() to handle async cache object creation

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_write_req() will skip caching if the fscache cookie is disabled, but this is a p…

▾ Midnight zone — Critical, or high with PoC / in-the-wild

Depth score54/ 100 · Moderate

impact 53.9 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Aug 15, 2026

Updated

Oct 21, 2026

CVSS

9.8

Vendor

Linux

Product

Linux

CWE

—

Depth score

54 · Moderate

EPSS

0.65% · p50

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 67 days

Aug 15, 2026Published
Disclosed via CVEORG
Oct 21, 2026Record revised
Last analysed / modified upstream
Oct 21, 2026EPSS first tracked
0.6%

Linux #cve.org

Affected

Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < aee03fbc8803a40d65e20f1af816a7219048a426
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 1188a9846fadeacf9d1430b528e5217f749d665b
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < dbd6f56d975b23241b7bbb11bb8f562af548a0aa
Linux 6.11

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix netfs_create_write_req() to handle async cache object creation

netfs_create_write_req() will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough yet that has been enabled - thereby causing the call to fscache_begin_write_operation() to be skipped.

Fix this by removing the checks on the cookie and delegating this to fscache_begin_write_operation().

Affected

Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < aee03fbc8803a40d65e20f1af816a7219048a426
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 1188a9846fadeacf9d1430b528e5217f749d665b
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < dbd6f56d975b23241b7bbb11bb8f562af548a0aa
Linux 6.11

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org

← Back to feed

CVE-2026-72366Critical· 9.8▾ Midnight

netfs: Fix netfs_create_write_req() to handle async cache object creation

▾ Midnight zone — Critical, or high with PoC / in-the-wild

Depth score54/ 100 · Moderate

impact 53.9 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Aug 15, 2026

Updated

Oct 21, 2026

CVSS

9.8

Vendor

Linux

Product

Linux

CWE

—

Depth score

54 · Moderate

EPSS

0.65% · p50

Platforms

—

Source

CVEORG

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 67 days

Aug 15, 2026Published
Disclosed via CVEORG
Oct 21, 2026Record revised
Last analysed / modified upstream
Oct 21, 2026EPSS first tracked
0.6%

Linux #cve.org

Affected

Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < aee03fbc8803a40d65e20f1af816a7219048a426
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 1188a9846fadeacf9d1430b528e5217f749d665b
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < dbd6f56d975b23241b7bbb11bb8f562af548a0aa
Linux 6.11

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix netfs_create_write_req() to handle async cache object creation

Fix this by removing the checks on the cookie and delegating this to fscache_begin_write_operation().

Affected

Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < aee03fbc8803a40d65e20f1af816a7219048a426
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < 1188a9846fadeacf9d1430b528e5217f749d665b
Linux >= 7b589a9b45ae32aa9d7bece597490e141198d7a6 < dbd6f56d975b23241b7bbb11bb8f562af548a0aa
Linux 6.11

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#cve.org