CVE-2026-72355

A flaw was found in the Linux kernel's netfs component. This vulnerability arises from incorrect barriering when processing the subrequest list, allowing a subrequest to be observed before it has been fully added by the application thread. This race condition could lead to unexpected system behavior or data inconsistencies.

This vulnerability is rated as having Moderate impact because triggering the race condition requires local access to initiate concurrent network filesystem I/O, restricting potential consequences to a local denial of service rather than privilege escalation or remote compromise. An attacker must manipulate network filesystem retry timing to observe improperly synchronized subrequests during retry processing. Earlier enterprise distributions including Red Hat Enterprise Linux 7, 8, and 9 do not contain the affected code and remain unaffected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.