CVE-2026-72365 netfs: Fix writethrough to use collection offload
A flaw in the Linux kernel netfs subsystem causes asynchronous write collection failures, potentially leading to denial of service or data integrity issues.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-72365?
CVE-2026-72365 is a vulnerability in Linux, published on 15 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix writethrough to use collection offload
Fix writethrough write to set NETFS_RREQ_OFFLOAD_COLLECTION on the request so that collection is processed asynchronously rather than only right at the end - and also so that asynchronous O_SYNC writes get collected at all.
Which versions are affected by CVE-2026-72365?
How do I fix CVE-2026-72365?
Apply the vendor's patch.
Is CVE-2026-72365 being exploited?
There is no known exploitation of CVE-2026-72365 in the wild and no public exploit code.
Sources
Also known as BELL-CVE-2026-72365, DEBIAN-CVE-2026-72365, GHSA-4f95-r79h-75g9, UBUNTU-CVE-2026-72365.