CVE-2026-72367

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iomap component where a concurrent truncate operation can cause an unsigned wrap of the io size variable. This occurs when end pos falls below ioend->io offset during the trimming of io size to track valid data within the End of File (EOF). The resulting huge value in io size can mislead append detection and corrupt size handling during completion, affecting filesystem decisions regarding on-disk EOF updates and unwritten or Copy-on-Write (COW) completion ranges. This can be triggered when writeback continues past a byte-level EOF to a block-aligned range or when a file is shrunk concurrently after end pos is sampled in the iomap writeback handle eof() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.