CVE-2026-72366
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
In the Linux kernel netfs module, netfs_create_write_req() skips caching if the fscache cookie is disabled, but this is problematic because async cache object creation might not have completed. The fix removes the cookie checks and delegates this to fscache_begin_write_operation().
Risk Assessment
Skipping cache write operations can lead to data inconsistency or performance degradation, but does not pose a direct security threat.
Recommendation
Apply a Linux kernel update that includes the fix for this vulnerability.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_write_req() will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough yet that has been enabled - thereby causing the call to fscache_begin_write_operation() to be skipped. Fix this by removing the checks on the cookie and delegating this to fscache_begin_write_operation().