CVE-2026-72381

The CVE covers a Linux kernel use-after-free in ksmbd: fp->owner.name (a per-open kstrdup buffer) can be read while freed during a race between two concurrent SMB2 durable reconnects (DH2C/DHnC) on the same persistent_id. The issue stems from a read in ksmbd_vfs_compare_durable_owner() against...

CVE-2026-72379

The CVE-2026-72379 issue is in the Linux kernel: vfs_tmpfile() did not verify the caller’s fsuid/fsGid mappings, allowing O_TMPFILE creation on idmapped mounts when mapping does not cover the caller. The fix adds a missing fsuidgid_has_mapping() check so that O_TMPFILE creation is blocked unless ...

CVE-2026-72380

Technical details are not publicly available in the provided documents; monitor for updates.

CVE-2026-72378

The CVE-2026-72378 entry concerns the Linux kernel, specifically the afs_extract_vl_addrs() path. The underlying issue is that error codes were only set on the first iteration of a loop; the patch fixes this by ensuring the correct error code is assigned on every iteration. This affects the AFS c...

CVE-2026-72377

Summary of CVE-2026-72377 : In the Linux kernel, a defect in AFS handling caused symlinks and mountpoints to incorrectly inherit AS_RELEASE_ALWAYS due to afs_apply_status(), even though they use afs_dir_aops which have no release_folio callback. This mismatch allowed memory management code to mis...

CVE-2026-72376

CVE-2026-72376 refers to a Linux kernel issue in the AFS subsystem where the counter net->cells_outstanding was incremented before the failure check of idr_alloc_cyclic(), leaving the count incremented when an error occurs. The fix corrects the order of operations so the increment happens only...

CVE-2026-72375

CVE-2026-72375 affects the Linux kernel and relates to the AFS subsystem. The issue arises from insufficient reinitialisation of afs_vnode::lock_work (and related lock_work handling) during inode allocation, causing intermittent warnings from debugobjects (e.g., “activate not available” messages ...

CVE-2026-72374

The CVE affects the Linux kernel AFS client: a bug in callback message parsing caused -EAGAIN to be swallowed (instead of being propagated by afs_extract_data), potentially impacting availability. The fix corrects the callback service message parsers to pass through -EAGAIN. CVSS 3.1 base score 7...

CVE-2026-72373

The CVE-2026-72373 entry concerns the Linux kernel. It fixes a NULL pointer dereference in afs_break_some_callbacks() by adding a check for NULL from afs_lookup_volume_rcu(), addressing cases where the specified AFS volume is unknown. The vulnerability description across sources aligns on this ro...

CVE-2026-72372

CVE-2026-72372 affects the Linux kernel in the afs subsystem, fixing a race when modifying net->cells_dyn_ino. The patch adds exclusive locking via net->cells_lock and changes the removal of a cell from net->cells_dyn_ino to afs_destroy_cell_work() instead of afs_cell_destroy(), because ...

CVE-2026-72371

The CVE concerns the Linux kernel vulnerability in the AFS file system where AFS_VOLUME_RM_TREE is set on the wrong volume during afs_insert_volume_into_cell(). The fix changes the logic to set AFS_VOLUME_RM_TREE on the volume being replaced (not the new volume), because the new volume is removed...

CVE-2026-72370

The CVE-2026-72370 entry concerns the Linux kernel vulnerability in iomap related to releasing pages on an atomic dio size mismatch. If bio_iov_iter_get_pages() or the bounce helper succeeds but builds a short bio, the REQ_ATOMIC size check rejects it before submission; the old error path would d...

CVE-2026-72368

In the Linux kernel, CVE-2026-72368 describes a double unlock in the nomem_d_alloc path of cachefiles: after start_creating() fails with -ENOMEM, __start_dirop() releases the parent lock, but nomem_d_alloc in cachefiles_get_directory() unconditionally unlocks d_inode(dir) again, corrupting the rw...

CVE-2026-72369

CVE-2026-72369 (Minix) - detail summary : The Linux kernel vulnerability arises in minix_check_superblock() where minix_blocks_needed() uses unsigned DIV_ROUND_UP(), allowing s_ninodes/s_zones near UINT_MAX to wrap to zero, making a zero bitmap-block count appear valid. This can lead to dereferen...

CVE-2026-72366

The CVE-2026-72366 entry concerns the Linux kernel netfs path: netfs_create_write_req() could skip caching if the fscache cookie was disabled, which during async cache object creation might not be advanced enough to enable caching. The fix removes cookie checks and delegates control to fscache_be...

CVE-2026-72367

Technical details about CVE-2026-72367 are not publicly provided in the supplied documents; monitor for updates.

CVE-2026-72365

CVE-2026-72365 affects the Linux kernel netfs subsystem. The vulnerability was addressed by a fix to writethrough handling: the write request now sets NETFS_RREQ_OFFLOAD_COLLECTION so collection is processed asynchronously (not only at the end) and asynchronous O_SYNC writes are collected as well...

CVE-2026-72363

Summary of CVE-2026-72363 : A Linux kernel issue in the netfs subsystem: when ENOMEM occurs during writeback iteration, the current folio’s state is not properly updated, requiring the folio to be redirtied and unlocked before invoking the terminal writeback_iter(). The available connected docume...

CVE-2026-72364

The CVE-2026-72364 pertains to the Linux kernel netfs writeback path. Affected component: writeback_iter() in netfs. Root cause: error handling in the writeback loop did not properly unwind state after an error. As documented, when an error occurs, writeback_iter() must be called again with the e...

CVE-2026-72362

The CVE-2026-72362 issue affects the Linux kernel DRM/XE PT path (xe_pt_zap_ptes_entry). The vulnerability arises when a NULL child pointer for unpopulated entries is dereferenced because container_of(*child) is called before a NULL check, causing a crash. The fix moves the container_of() call af...