CVE-2026-72363

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-72363", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-09T03:40:39.921Z", "datePublished": "2026-08-15T05:56:02.071Z", "dateUpdated": "2026-10-21T12:44:40.702Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-21T12:44:40.702Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix folio state after ENOMEM whilst under writeback iteration\n\nFix the state of the current folio when ENOMEM occurs during writeback\niteration. The folio needs to be redirtied and unlocked before the\nterminal writeback_iter() is invoked."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/netfs/write_issue.c"], "versions": [{"version": "e0186fa7436e55db10cecc2308749e2a877269a5", "lessThan": "f75d7b10ec080cc15fe21092d9b5c6b2bc55260a", "status": "affected", "versionType": "git"}, {"version": "06fa229ceb36898e68022b5654c017d2c6582d7d", "lessThan": "a9b89752c2726e88ea67994fb97a0316b24d30b7", "status": "affected", "versionType": "git"}, {"version": "06fa229ceb36898e68022b5654c017d2c6582d7d", "lessThan": "1a4421c7a5611db554328f721a4f7642440b44bd", "status": "affected", "versionType": "git"}, {"version": "06fa229ceb36898e68022b5654c017d2c6582d7d", "lessThan": "b6a713fd34b9498ee2164d5d3e8460732a392efc", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/netfs/write_issue.c"], "versions": [{"version": "6.14", "status": "affected"}, {"version": "0", "lessThan": "6.14", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.14", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f75d7b10ec080cc15fe21092d9b5c6b2bc55260a"}, {"url": "https://git.kernel.org/stable/c/a9b89752c2726e88ea67994fb97a0316b24d30b7"}, {"url": "https://git.kernel.org/stable/c/1a4421c7a5611db554328f721a4f7642440b44bd"}, {"url": "https://git.kernel.org/stable/c/b6a713fd34b9498ee2164d5d3e8460732a392efc"}], "title": "netfs: Fix folio state after ENOMEM whilst under writeback iteration", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/netfs/write_issue.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f75d7b10ec080cc15fe21092d9b5c6b2bc55260a", "status": "affected", "version": "e0186fa7436e55db10cecc2308749e2a877269a5", "versionType": "git"}, {"lessThan": "a9b89752c2726e88ea67994fb97a0316b24d30b7", "status": "affected", "version": "06fa229ceb36898e68022b5654c017d2c6582d7d", "versionType": "git"}, {"lessThan": "1a4421c7a5611db554328f721a4f7642440b44bd", "status": "affected", "version": "06fa229ceb36898e68022b5654c017d2c6582d7d", "versionType": "git"}, {"lessThan": "b6a713fd34b9498ee2164d5d3e8460732a392efc", "status": "affected", "version": "06fa229ceb36898e68022b5654c017d2c6582d7d", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/netfs/write_issue.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.14"}, {"lessThan": "6.14", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix folio state after ENOMEM whilst under writeback iteration\n\nFix the state of the current folio when ENOMEM occurs during writeback\niteration. The folio needs to be redirtied and unlocked before the\nterminal writeback_iter() is invoked."}], "id": "CVE-2026-72363", "lastModified": "2026-10-21T13:19:35.780", "metrics": {}, "published": "2026-08-15T06:22:09.723", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/1a4421c7a5611db554328f721a4f7642440b44bd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a9b89752c2726e88ea67994fb97a0316b24d30b7"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/b6a713fd34b9498ee2164d5d3e8460732a392efc"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f75d7b10ec080cc15fe21092d9b5c6b2bc55260a"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: netfs: Fix folio state after ENOMEM whilst under writeback iteration", "id": "2516390", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2516390"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-413", "details": ["In the Linux kernel, the following vulnerability has been resolved:\nnetfs: Fix folio state after ENOMEM whilst under writeback iteration\nFix the state of the current folio when ENOMEM occurs during writeback\niteration. The folio needs to be redirtied and unlocked before the\nterminal writeback_iter() is invoked.", "A flaw was found in the netfs component of the Linux kernel. This vulnerability occurs when the system runs out of memory during a data write operation, leading to an incorrect state for the affected memory pages (folios). An attacker could potentially trigger this condition, which may cause the system to become unstable or unresponsive, resulting in a denial of service (DoS). The fix ensures that these memory pages are properly managed to prevent such issues."], "name": "CVE-2026-72363", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Fix deferred", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:8", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/o:redhat:enterprise_linux:9", "fix_state": "Not affected", "package_name": "kernel-rt", "product_name": "Red Hat Enterprise Linux 9"}], "public_date": "2026-08-15T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-72363\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-72363\nhttps://lore.kernel.org/linux-cve-announce/2026081514-CVE-2026-72363-5e8b@gregkh/T"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[06fa229ceb36898e68022b5654c017d2c6582d7d,a9b89752c2726e88ea67994fb97a0316b24d30b7)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[06fa229ceb36898e68022b5654c017d2c6582d7d,1a4421c7a5611db554328f721a4f7642440b44bd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[06fa229ceb36898e68022b5654c017d2c6582d7d,b6a713fd34b9498ee2164d5d3e8460732a392efc)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "6.14"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[0,6.14)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.40,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.1.5,7.2.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.2-rc2,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-08-15T18:30:12.331757+00:00", "updated": "2026-08-22T05:15:03.956666+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"], "weaknesses": ["CWE-400", "CWE-413", "CWE-665"]}