CVE-2026-72372
In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net->cells_dyn_ino Fix the lack of locking around modifications of net->cells_dyn_ino by taking net->cells_lock exclusively. This also requires to cell to be removed from net->cells_dyn_ino in afs_destroy_cell_work() rather than in afs_cell_destroy() as the latter runs in RCU cleanup context and sleeping locks cannot be taken there.
Affected versions
Linux kernel versions
6.12.97,
6.15
and later are affected. Fixed in
6.12.101,
6.18.40,
7.1.5,
7.2-rc2
and their respective stable series.
References
4 totalFrequently asked questions
-
What is CVE-2026-72372?
CVE-2026-72372 is a unscored severity Linux kernel vulnerability . It affects Linux kernel versions from 6.12.97 onward and has been patched in 6.12.101, 6.18.40, 7.1.5 and others. CVE-2026-72372 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-72372?
Yes. CVE-2026-72372 has been patched. Fixed versions include 6.12.101, 6.18.40, 7.1.5 and others. If you are running Linux kernel 6.12.97 or later up to the fix versions, apply the relevant patch for your kernel branch.
-
Is CVE-2026-72372 actively exploited?
No. CVE-2026-72372 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.