CVE-2026-72372

afs: Fix lack of locking around modifications of net->cells_dyn_ino

HIGH

7.8

CVSS Score

Published: August 15, 2026 at 05:56 AM UTC

Updated: August 17, 2026 at 06:18 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.8

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: afs: Fix lack of locking around modifications of net->cells_dyn_ino Fix the lack of locking around modifications of net->cells_dyn_ino by taking net->cells_lock exclusively. This also requires to cell to be removed from net->cells_dyn_ino in afs_destroy_cell_work() rather than in afs_cell_destroy() as the latter runs in RCU cleanup context and sleeping locks cannot be taken there.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

6.12.97 ≤ v < 6.12.1016.15 ≤ v < 6.18.406.15 ≤ v < 7.1.56.15 ≤ v < 7.21d0b929fc070b4115403a0a6206a0c6a62dd61f5537b0105952578531f748c7fb3ce36ae9a5147846.12.97 6.15

Vendor states this is fixed in 2ffb70a8a01988046bb207b7d0af9358a8337378 (fixed)

Vendor states this is fixed in 4d8a2fe8847859f4fa4e9a2fa1221c9c1158e66b (fixed)

Vendor states this is fixed in 55e841836c6f4646490f7b0347192b7a92d431ba (fixed)

Vendor states this is fixed in e94f92fd56c553a8bf9421c3289e1b85c7c08857 (fixed)

Vendor states this is fixed in 6.12.101 (unaffected)

Vendor states this is fixed in 6.15 (unaffected)

Vendor states this is fixed in 6.18.40 (unaffected)

Vendor states this is fixed in 7.1.5 (unaffected)

Vendor states this is fixed in 7.2 (unaffected)