Strix
56.6K

CVE-2026-72356

HIGHCVSS 7.5/10EPSS 0.21%

Last modified

CVE-2026-72356 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.. EPSS estimates a 0.21% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.

Metrics

CVSS 3.1
7.5/10

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Probability
0.21%

11.4th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 69c3c023af25edb5433a2db824d3e7cc328f0183, < b9ee1f0347bf56d019ca28ddff090234bb45b05c; >= 69c3c023af25edb5433a2db824d3e7cc328f0183, < 86652704a7fd41a5a8459027e08640bbd1952826; >= 69c3c023af25edb5433a2db824d3e7cc328f0183, < 3a303f985c6bec8787c2ad4a16b39c14c5bcd765; >= 69c3c023af25edb5433a2db824d3e7cc328f0183, < c16b8c4cfb4fe2244cc33e469a93c1ab8684146b
LinuxLinux6.10

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-72356?
In the Linux kernel, the following vulnerability has been resolved: cifs: Fix missing credit release on failure in cifs_issue_read() Fix missing release of credits in the failure path in cifs_issue_read() lest retrying the subreq just overwrites the credits value.
How severe is CVE-2026-72356?
CVE-2026-72356 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.
How do I fix CVE-2026-72356?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-72356?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST