What is the CVSS score of CVE-2026-72364?

CVE-2026-72364 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H. EPSS exploitation probability: 0.2%.

Which versions of Linux Kernel are affected by CVE-2026-72364?

A Linux kernel network filesystem vulnerability permits local users to crash systems or corrupt kernel memory, requiring urgent patch deployment for systems with user-facing local access.. A patch is available.

How to fix or mitigate CVE-2026-72364?

Within 24 hours, complete an inventory of all Linux systems running kernel versions prior to the vendor's patched release, with particular attention to development systems and servers supporting multiple users; create a remediation schedule based on business criticality. Within 7 days, test and validate the vendor patch in non-production environments to confirm compatibility and system stability. Complete patch deployment across all affected production systems within 30 days, coordinating with change management to minimize operational disruption and prioritizing high-value systems first.

Linux Kernel CVE-2026-72364

EUVD-2026-59263 HIGH

2026-08-15 Linux

GHSA-98p8-g3h5-vfv6

Information Disclosure Linux Red Hat Suse

7.1

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

7.1 HIGH

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

vuln.today AI

7.1 HIGH

Local attack vector and low privileges required to reach netfs writeback path; no confidentiality impact per description; integrity and availability both high due to folio corruption and potential kernel hang.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N

SUSE

6.1 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Aug 17, 2026 - 08:48 vuln.today

CVSS changed

Aug 17, 2026 - 06:22 NVD

7.1 (HIGH)

Patch available

Aug 15, 2026 - 07:20 EUVD

CVE Published

Aug 15, 2026 - 05:56 cve.org

HIGH 7.1

CVE Published

Aug 15, 2026 - 05:56 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix writeback error handling

Fix the error handling in writeback_iter() loop. If an error occurs, writeback_iter() needs to be called again with *error set to the error so that it can clean up iteration state. Further, the current folio needs unlocking and redirtying.

AnalysisAI

Improper error handling in the Linux kernel's netfs (network filesystem) subsystem allows a local user with low privileges to corrupt kernel folio state or trigger a kernel hang. The writeback_iter() loop fails to re-invoke itself with the error code set when a write operation fails, leaving folios unlocked and non-redirtied, which produces incorrect iteration state with high integrity and availability consequences. No public exploit code has been identified, and EPSS places exploitation probability at 0.21% (11th percentile), consistent with a constrained local kernel defect rather than a broadly weaponized vulnerability.

Technical ContextAI

The netfs subsystem provides a generic writeback abstraction used by network-backed filesystems in the Linux kernel, including NFS, Ceph, AFS, and ksmbd. Folios - the kernel's variable-size memory page abstraction - are dirtied when userspace writes to a network-mounted filesystem, then written back asynchronously via writeback_iter(). The bug lies in error propagation: when writeback_iter() encounters a failure mid-loop, it must be re-called with the *error field populated so it can clean up internal iteration state; without this re-invocation, the folio remains locked and not re-queued as dirty. The CWE field is unassigned in the source data, but the root cause class is closest to CWE-755 (Improper Handling of Exceptional Conditions) or CWE-459 (Incomplete Cleanup). CPE data (cpe:2.3:a:linux:linux:*:*:*:*:*:*:*:*) identifies the Linux kernel broadly as the affected product, with the vulnerable range starting at commit 288ace2f57c9d06dd2e42bd80d03747d879a4068 per EUVD-2026-59263.

RemediationAI

Upgrade to a patched kernel version from the appropriate stable series: 7.1.5 or later for the 7.1 branch, 7.2-rc2 or later for the development series, 6.12.97 or later for the 6.12 LTS branch, or 6.18.40 or later for the 6.18 stable series. The fix commits are available directly from the kernel stable tree at https://git.kernel.org/stable/c/89df9c158a25d0a7c6ca079a9bd9ca7009d75c7b, https://git.kernel.org/stable/c/fb39ffd3cc5422887fd118668ff45ebfdbc83302, https://git.kernel.org/stable/c/1bb33d959aabcde07d724b5eb9992462e91fa79a, and https://git.kernel.org/stable/c/ac5f95ac5d6d0f4c567b8b642825705a2bf0d79e. If patching cannot be applied immediately, restrict local user write access to network filesystem mounts (e.g., enforce ro mount options where feasible, or limit which users may mount or write to NFS/Ceph/AFS shares) - this reduces the likelihood of triggering writeback operations that encounter errors, though it does not eliminate the vulnerability and may impact legitimate workflows.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

CVE-2026-72364 vulnerability details – vuln.today

Back

Linux Kernel CVE-2026-72364

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

RemediationAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code