9.8
CVE-2026-72366
- EPSS 0.64%
- Veröffentlicht 15.08.2026 05:56:04
- Zuletzt bearbeitet 17.08.2026 06:18:40
- Erkennungen
netfs: Fix netfs_create_write_req() to handle async cache object creation
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_write_req() will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough yet that has been enabled - thereby causing the call to fscache_begin_write_operation() to be skipped. Fix this by removing the checks on the cookie and delegating this to fscache_begin_write_operation().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
7b589a9b45ae32aa9d7bece597490e141198d7a6
Version <
8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a
Status
affected
Version
7b589a9b45ae32aa9d7bece597490e141198d7a6
Version <
1188a9846fadeacf9d1430b528e5217f749d665b
Status
affected
Version
7b589a9b45ae32aa9d7bece597490e141198d7a6
Version <
dbd6f56d975b23241b7bbb11bb8f562af548a0aa
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.11
Status
affected
Version
0
Version <
6.11
Status
unaffected
Version <=
6.18.*
Version
6.18.40
Status
unaffected
Version <=
7.1.*
Version
7.1.5
Status
unaffected
Version <=
*
Version
7.2
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.64% | 0.477 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| 416baaa9-dc9f-4396-8d5f-8c081fb06d67 | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
https://git.kernel.org/stable/c/8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a
https://git.kernel.org/stable/c/1188a9846fadeacf9d1430b528e5217f749d665b
https://git.kernel.org/stable/c/dbd6f56d975b23241b7bbb11bb8f562af548a0aa