{ "cveId": "CVE-2026-72375", "url": "https://patchblox.com/security/cve/CVE-2026-72375", "summary": "CVE-2026-72375 is fixed in 20 products on 1 platform, first by DEBIAN-CVE-2026-72375, released August 15, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in parti...", "description": "In the Linux kernel, the following vulnerability has been resolved: afs: Fix reinitialisation of the inode, in particular -\u003Elock_work It seems that initalising afs_vnode::lock_work a single time in the slab\u0027s init function isn\u0027t sufficient for work_structs. This results in the DEBUG_OBJECTS debugging stuff producing a warning occasionally when running the generic/131 xfstest: ODEBUG: activate not available (active state 0) object: 0000000016d8760f object type: work_struct hint: afs_lock_work\u002B0x0/0x220 WARNING: lib/debugobjects.c:629 at debug_print_object\u002B0x4b/0x90, CPU#3: locktest/7695 ... CPU: 3 UID: 0 PID: 7695 Comm: locktest Tainted: G S 7.1.0-build3\u002B #2771 PREEMPT ... RIP: 0010:debug_print_object\u002B0x65/0x90 ... Call Trace: \u003CTASK\u003E ? __pfx_afs_lock_work\u002B0x10/0x10 debug_object_activate\u002B0x122/0x170 insert_work\u002B0x25/0x60 __queue_work\u002B0x2e0/0x340 queue_delayed_work_on\u002B0x48/0x70 afs_fl_release_private\u002B0x57/0x70 locks_release_private\u002B0x5c/0xa0 locks_free_lock\u002B0xe/0x20 posix_lock_inode\u002B0x55f/0x5b0 locks_lock_inode_wait\u002B0x81/0x140 ? file_write_and_wait_range\u002B0x50/0x70 afs_lock\u002B0xcd/0x110 fcntl_setlk\u002B0x10d/0x260 do_fcntl\u002B0x24e/0x5b0 __do_sys_fcntl\u002B0x6a/0x90 do_syscall_64\u002B0x11e/0x310 entry_SYSCALL_64_after_hwframe\u002B0x71/0x79 Fix this by reinitialising -\u003Elock_work after allocating an inode. Also, flush -\u003Elock_work when the inode is being evicted to make sure it\u0027s not still running.", "published": "2026-08-15T06:22:10Z", "severity": "high", "cvss": 7.8, "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "epss": 0.00176, "epssPercentile": 0.07118, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.18.41-94.142", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 13.5 (trixie)", "fixedVersion": "6.12.115-2", "fix": "DEBIAN-CVE-2026-72375", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-72375", "released": "2026-08-15T22:38:55Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.1.5-1", "fix": "DEBIAN-CVE-2026-72375", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-72375", "released": "2026-08-15T22:38:55Z" }, { "platform": "linux", "product": "microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.41-94.142.amzn2023", "fix": "ALAS2023-2026-2071", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2071", "released": "2026-08-31T09:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-09T13:31:49Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }