CVE-2026-72372

afs: Fix lack of locking around modifications of net->cells_dyn_ino

State: Published
Severity: 7.8 High
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

afs: Fix lack of locking around modifications of net->cells_dyn_ino

Fix the lack of locking around modifications of net->cells_dyn_ino by taking net->cells_lock exclusively. This also requires to cell to be removed from net->cells_dyn_ino in afs_destroy_cell_work() rather than in afs_cell_destroy() as the latter runs in RCU cleanup context and sleeping locks cannot be taken there.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	537b0105952578531f748c7fb3ce36ae9a514784 to before 4d8a2fe8847859f4fa4e9a2fa1221c9c1158e66bAffected 1d0b929fc070b4115403a0a6206a0c6a62dd61f5 to before 2ffb70a8a01988046bb207b7d0af9358a8337378Affected 1d0b929fc070b4115403a0a6206a0c6a62dd61f5 to before e94f92fd56c553a8bf9421c3289e1b85c7c08857Affected 1d0b929fc070b4115403a0a6206a0c6a62dd61f5 to before 55e841836c6f4646490f7b0347192b7a92d431baAffected 6.12.97 to before 6.12.101Affected
LinuxLinux	6.15Affected before 6.15Not affected 6.12.101 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

537b0105952578531f748c7fb3ce36ae9a514784 to before 4d8a2fe8847859f4fa4e9a2fa1221c9c1158e66bAffected
1d0b929fc070b4115403a0a6206a0c6a62dd61f5 to before 2ffb70a8a01988046bb207b7d0af9358a8337378Affected
1d0b929fc070b4115403a0a6206a0c6a62dd61f5 to before e94f92fd56c553a8bf9421c3289e1b85c7c08857Affected
1d0b929fc070b4115403a0a6206a0c6a62dd61f5 to before 55e841836c6f4646490f7b0347192b7a92d431baAffected
6.12.97 to before 6.12.101Affected

LinuxLinux

6.15Affected
before 6.15Not affected
6.12.101 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.