What is the CVSS score of CVE-2026-72355?

CVE-2026-72355 has a contested CVSS base score of 9.8 from a third party (e.g. CISA-ADP), while the vendor rates it Critical. vuln.today uses the vendor rating as authoritative.

Which versions of Linux Kernel are affected by CVE-2026-72355?

A critical memory-ordering defect in Linux kernel 6.10+ netfs subsystems (AFS, Ceph, CIFS, 9p) enables use of partially-initialized data, affecting organizations relying on these network filesystems.. A patch is available.

How to fix or mitigate CVE-2026-72355?

Within 24 hours: identify all Linux systems running kernel 6.10 or later with netfs-backed filesystems (AFS, Ceph, CIFS, 9p) and confirm patch availability from your distribution's vendor advisory. Within 7 days: apply vendor-released patch to all affected systems according to your maintenance windows, verifying availability for your specific distribution (Ubuntu, RedHat, Debian, etc.). Within 30 days: complete validation that all patched systems operate normally and document any systems where patching was deferred or deemed out-of-scope.

Linux Kernel CVE-2026-72355

EUVD-2026-59254 CRITICAL

2026-08-15 Linux

GHSA-wvjx-p3c2-7wqp

Information Disclosure Linux Red Hat Suse

Critical

Disputed · 9.8 Vendor: Linux

Severity by source

Sources disagree (Medium–Critical)

Vendor (Linux) PRIMARY

9.8 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

vuln.today AI

5.3 MEDIUM

Local I/O race in a kernel retry path, so AV:L and AC:H; needs an active mount and I/O so PR:L; impact is mainly crash (A:H) with limited stale-data read (C:L).

3.1 AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:H

4.0 AV:L/AC:H/AT:N/PR:L/UI:N/VC:L/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 MEDIUM

qualitative

vuln.today treats the vendor’s rating as authoritative. A higher third-party CVSS (e.g. CISA-ADP) is shown for transparency but does not drive the headline severity.

CVSS VectorVendor: Linux

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 08:43 vuln.today

CVSS changed

Aug 17, 2026 - 06:22 NVD

9.8 (CRITICAL)

Patch available

Aug 15, 2026 - 07:20 EUVD

CVE Published

Aug 15, 2026 - 05:55 cve.org

UNKNOWN (no severity yet)

CVE Published

Aug 15, 2026 - 05:55 cve.org

CRITICAL 9.8

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix barriering when walking subrequest list

Fix the barriering used when walking the subrequest list in retry as there's a possibility of seeing a subreq that's just been added by the application thread.

AnalysisAI

Memory-ordering (barriering) defect in the Linux kernel's netfs subsystem allows a subrequest that was just added by an application thread to be observed inconsistently while the retry path walks the subrequest list, risking use of partially-initialized data. The flaw affects netfs-backed network filesystems (e.g. AFS, Ceph, CIFS, 9p) in kernels from 6.10 onward and has been resolved upstream. There is no public exploit identified at time of analysis, and the EPSS score is very low (0.20%, 10th percentile), indicating negligible observed exploitation interest despite the NVD's 9.8 rating.

Technical ContextAI

netfs is the Linux kernel's shared network-filesystem helper library that manages read/write request buffering and retry logic on behalf of filesystems such as AFS, Ceph, CIFS/SMB and 9p. A single I/O request is split into subrequests tracked on a list; on retry, the kernel walks that list. The fix corrects insufficient memory barriering during this walk: without proper ordering, the retry thread can race with an application thread that is concurrently appending a subrequest, and observe it before its fields are fully published. This is a concurrency/memory-ordering (race condition) class of bug (CWE data was not supplied, listed as N/A); the vendor tags additionally label it 'Information Disclosure', consistent with reading stale or partially-initialized list state.

RemediationAI

Upgrade to a kernel build that includes the upstream fix commits be47c047250671c9225c0319ca4695be9b391c59 and 5c6ce05e406520290c1d89da97fb3cd70c09137d (https://git.kernel.org/stable/c/be47c047250671c9225c0319ca4695be9b391c59 and https://git.kernel.org/stable/c/5c6ce05e406520290c1d89da97fb3cd70c09137d); the fix is available upstream as commits rather than a cleanly tagged release version in the provided data, so pull the fixed stable point-release from your distribution once it ships. If immediate patching is not possible, the practical compensating control is to avoid using netfs-backed network filesystems (AFS, Ceph, CIFS/SMB, 9p) on exposed hosts and reduce concurrent I/O retry pressure against them - the trade-off is loss of those filesystem capabilities. Because the bug requires an active netfs mount, hosts with no such mounts are not exposed.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

CVE-2026-72355 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-72355

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code