CVE-2026-72356: cifs: Fix missing credit release on failure in cifs_issue_read()

Published Aug 15, 2026

Updated

In the Linux kernel, the following vulnerability has been resolved:

cifs: Fix missing credit release on failure in cifsissueread()

Fix missing release of credits in the failure path in cifsissueread() lest retrying the subreq just overwrites the credits value.

Event History

Aug 15, 2026

CVE Published

via MITRE·05:55 AM

Data Sourced

via MITRE·05:55 AM

Description

CVE-2026-72356 has a risk score of 27, indicating significant security implications.

To fix CVE-2026-72356, users should apply the latest updates or patches provided by their Linux distribution.

CVE-2026-72356 affects the Linux kernel implementations utilizing the CIFS protocol.

The missing credit release on failure in CVE-2026-72356 can lead to resource management issues, potentially impacting system stability.

CVE-2026-72356 was published on August 15, 2026.