CVE-2026-72356
Received Received - Intake

Linux Kernel CIFS Credits Release Failure

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72356
EUVD
EUVD-2026-59255

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability in the CIFS (Common Internet File System) component. It involves a missing credit release when an error occurs in the cifs_issue_read() function. Credits here likely refer to network resources or permissions needed for file operations. Without proper release, these credits remain allocated, potentially causing resource exhaustion or system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's CIFS (Common Internet File System) module. Detection requires checking the kernel version and CIFS module for the affected code path. Use commands like 'uname -r' to check kernel version and 'modinfo cifs' to verify the module. If your kernel is vulnerable, the output will show the affected function 'cifs_issue_read()' without the credit release fix.

Impact Analysis

This vulnerability could lead to system crashes, hangs, or degraded performance due to un-released resources. If exploited repeatedly, it might cause denial-of-service conditions where the system becomes unresponsive or unable to handle further file operations.

Mitigation Strategies

Immediate mitigation involves updating the Linux kernel to a patched version where the fix for 'cifs_issue_read()' is included. Check your distribution's security updates or apply the official kernel patch. If updating is not immediately possible, consider disabling the CIFS module temporarily with 'modprobe -r cifs' if it is not critical for your operations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72356. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart