CVE-2026-72372
Received Received - Intake

Race Condition in Linux Kernel AFS Module

Publication date: 2026-08-15

Last updated on: 2026-08-15

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net->cells_dyn_ino Fix the lack of locking around modifications of net->cells_dyn_ino by taking net->cells_lock exclusively. This also requires to cell to be removed from net->cells_dyn_ino in afs_destroy_cell_work() rather than in afs_cell_destroy() as the latter runs in RCU cleanup context and sleeping locks cannot be taken there.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-15
Last Modified
2026-08-15
Generated
2026-08-15
AI Q&A
2026-08-15
EPSS Evaluated
N/A
NVD
CVE-2026-72372
EUVD
EUVD-2026-59271

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a lack of proper locking when modifying the net->cells_dyn_ino field. The issue is fixed by ensuring exclusive access via net->cells_lock during these modifications. Additionally, the cell removal process is adjusted to occur in afs_destroy_cell_work() instead of afs_cell_destroy() to avoid sleeping locks in RCU cleanup context.

Detection Guidance

This vulnerability involves a race condition in the Linux kernel's AFS (Andrew File System) module due to missing locking around modifications of net->cells_dyn_ino. Detection requires checking kernel logs for AFS-related errors or crashes, particularly during cell operations. Commands like dmesg | grep afs or journalctl -k | grep afs may reveal issues. Ensure your kernel version is updated to a patched release.

Impact Analysis

This vulnerability could lead to race conditions or memory corruption in the Linux kernel's AFS (Andrew File System) module. This might cause system instability, crashes, or unexpected behavior if exploited, particularly in environments using AFS for network file sharing.

Mitigation Strategies

Immediately update your Linux kernel to the latest stable version that includes the fix for this vulnerability. If updating is not immediately possible, disable the AFS module by running modprobe -r afs if it is not required. Monitor system logs for any signs of exploitation or instability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-72372. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart