Description
In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix folio state after ENOMEM whilst under writeback iteration

Fix the state of the current folio when ENOMEM occurs during writeback
iteration. The folio needs to be redirtied and unlocked before the
terminal writeback_iter() is invoked.
Published: 2026-08-15
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

When the Linux kernel encounters an out‑of‑memory (ENOMEM) condition while it is iterating over writeback for netfs, the current folio remains locked and un‑redirtied. This improper state can prevent future writeback, stall the kernel’s I/O loop, and potentially corrupt data, resulting in a system hang or data loss. The flaw is a result of failing to reset the folio flags after an ENOMEM error, as addressed by the recent fix.

Affected Systems

All releases of the Linux kernel that contain the netfs writeback logic are affected until the patch that implements the folio‑state cleanup is present. The patch is included in the kernel revisions referenced by the commit identifiers linked in the references. As the affected‑version range is not explicitly specified, all kernel deployments that have not yet applied the corresponding commit are vulnerable.

Risk and Exploitability

The CVSS score is 5.5, EPSS data is <1%, and the vulnerability is not listed in CISA KEV; the flaw requires a kernel running under memory pressure and the occurrence of an ENOMEM error during netfs writeback. There is no publicly documented remote exploitation path; an attacker would need to induce exhaustion of memory on a target with this kernel. The vulnerability’s impact is primarily a denial of service or potential data corruption if the writeback loop stalls. Because the bug is subtle and relies on a specific runtime condition, the risk is moderate to high for systems that frequently perform large amounts of network‑filesystem writes and may experience memory pressure.

Generated by OpenCVE AI on August 22, 2026 at 05:09 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade the Linux kernel to a version that contains the netfs folio‑state fix implemented in commit a9b89752c2726e88ea67994fb97a0316b24d30b7 or later.
  • If an immediate kernel upgrade is not possible, limit netfs writeback load during periods of high memory usage by reducing cached write operations or temporarily disabling large data transfers over the network filesystem.
  • Deploy monitoring that alerts when OOM events occur during writeback; when such an event is detected, apply the kernel update as soon as available to avoid prolonged kernel stalls.

Generated by OpenCVE AI on August 22, 2026 at 05:09 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 20 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-413
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate


Sat, 15 Aug 2026 18:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-400
CWE-665

Sat, 15 Aug 2026 06:00:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio state after ENOMEM whilst under writeback iteration Fix the state of the current folio when ENOMEM occurs during writeback iteration. The folio needs to be redirtied and unlocked before the terminal writeback_iter() is invoked.
Title netfs: Fix folio state after ENOMEM whilst under writeback iteration
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-08-17T05:13:14.297Z

Reserved: 2026-08-09T03:40:39.921Z

Link: CVE-2026-72363

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-08-15T06:22:09.723

Modified: 2026-08-17T06:18:40.490

Link: CVE-2026-72363

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-15T00:00:00Z

Links: CVE-2026-72363 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-22T05:15:03Z

Weaknesses
  • CWE-400

    Uncontrolled Resource Consumption

  • CWE-413

    Improper Resource Locking

  • CWE-665

    Improper Initialization