CVE-2026-72366
Critical
Description
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfs_create_write_req() to handle async cache object creation netfs_create_write_req() will skip caching if the fscache cookie is disabled, but this is a problem because async cache object creation might not have got far enough yet that has been enabled - thereby causing the call to fscache_begin_write_operation() to be skipped. Fix this by removing the checks on the cookie and delegating this to fscache_begin_write_operation().
SeverityCritical
CVSS9.8
Exploit probability—
Product
Linux
PublishedAug 15, 2026
First seenAug 15, 2026
How to fix
Update
- Linux Linuxaee03fbc8803a40d65e20f1af816a7219048a426, 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a, 1188a9846fadeacf9d1430b528e5217f749d665b, dbd6f56d975b23241b7bbb11bb8f562af548a0aa or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 7b589a9b45ae32aa9d7bece597490e141198d7a6 ≤ v < aee03fbc8803a40d65e20f1af816a7219048a426, 7b589a9b45ae32aa9d7bece597490e141198d7a6 ≤ v < 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a, 7b589a9b45ae32aa9d7bece597490e141198d7a6 ≤ v < 1188a9846fadeacf9d1430b528e5217f749d665b, 7b589a9b45ae32aa9d7bece597490e141198d7a6 ≤ v < dbd6f56d975b23241b7bbb11bb8f562af548a0aa, 6.11 | aee03fbc8803a40d65e20f1af816a7219048a426, 8ab75e445c161c4cb504aa98e20ce1dd1ecd8e9a, 1188a9846fadeacf9d1430b528e5217f749d665b, dbd6f56d975b23241b7bbb11bb8f562af548a0aa |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.