CVE-2026-72365

Received Received - Intake

Write to Netfs Collection Offload in Linux Kernel

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix writethrough to use collection offload Fix writethrough write to set NETFS_RREQ_OFFLOAD_COLLECTION on the request so that collection is processed asynchronously rather than only right at the end - and also so that asynchronous O_SYNC writes get collected at all.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72365

EUVD

EUVD-2026-59264

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the netfs subsystem where writethrough operations do not properly set the NETFS_RREQ_OFFLOAD_COLLECTION flag. This causes collection processing to occur synchronously at the end of writes instead of asynchronously, which can lead to delays and inefficiencies in write operations.

Detection Guidance

This vulnerability is specific to the Linux kernel's netfs component and does not provide direct detection commands. Monitoring kernel logs for errors related to netfs or write operations may help identify issues. Check kernel version and netfs-related errors using commands like dmesg | grep netfs or uname -a.

Impact Analysis

This vulnerability may cause slower write performance in applications using the Linux kernel's netfs subsystem, particularly those relying on asynchronous write operations. It could lead to delays in data persistence and potential system slowdowns during heavy write loads.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a specific Linux kernel write-through mechanism in the netfs subsystem. No evidence suggests data exposure, unauthorized access, or integrity issues that would impact regulatory compliance.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel updates from your distribution and apply patches promptly. No additional configuration changes are specified.

Hi! I’m here to help you understand CVE-2026-72365. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70