CVE-2026-72356
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
In the Linux kernel, the cifs module has a missing credit release in the failure path of cifs_issue_read(). This can lead to overwriting the credits value when retrying the subrequest, disrupting resource management.
Risk Assessment
The risk includes improper credit management in the CIFS protocol, which could lead to I/O errors or network operation hangs.
Recommendation
Apply the patch that ensures credit release in the failure path of cifs_issue_read() to prevent overwriting values.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.