CVE-2026-72368

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cachefiles module where a double unlock occurs in the nomem d alloc error path. When the start creating() function fails and returns -ENOMEM, the parent directory lock is already released within the start dirop() function. However, the nomem d alloc error path in cachefiles get directory() calls inode unlock(d inode(dir)) again, which corrupts the rwsem (read-write semaphore) state.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.