Answer in brief
CVE-2026-72306 records a Unknown severity vulnerability in vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
Answer in brief
CVE-2026-72306 records a Unknown severity vulnerability in vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c8a6153b6c59d95c0e091f053f6f180952ade91e <c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <09723f26ed801c083e914cec4cc0e1af4b933dc7 || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <d7e7c813834c6c05c26033456ab7169e2f9c99eb || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <3755965adbb617f4283ac6ccd351ed0676843cba || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <d8715b5a8fdb23fef576700e71d0c253dbeddad4 || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <8062ff9d366c4bc4ae775e14eac9a769f20c60dd || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <ae9c13b6fd79087cc5a216ee1649b6f012c2a238 | c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a, 09723f26ed801c083e914cec4cc0e1af4b933dc7, d7e7c813834c6c05c26033456ab7169e2f9c99eb, 3755965adbb617f4283ac6ccd351ed0676843cba, d8715b5a8fdb23fef576700e71d0c253dbeddad4, 8062ff9d366c4bc4ae775e14eac9a769f20c60dd, ae9c13b6fd79087cc5a216ee1649b6f012c2a238 |
| Linux/Linuxgeneric | 5.15 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter There is one race case in vduse_dev_msg_sync and vduse_dev_read_iter: vduse_dev_read_iter(): lock(msg_lock); dequeue_msg(send_list); unlock(msg_lock); vduse_dev_msg_sync(): wait_timeout() finish lock(msg_lock); check msg->complete is false list_del(msg); <- double list_del() crash! To fix this case, we shall ensure vduse_msg is on send_list or recv_list outside the msg_lock critical section.
Quoted source text, attributed separately from HOL analysis.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=c8a6153b6c59d95c0e091f053f6f180952ade91e <c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <09723f26ed801c083e914cec4cc0e1af4b933dc7 || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <d7e7c813834c6c05c26033456ab7169e2f9c99eb || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <3755965adbb617f4283ac6ccd351ed0676843cba || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <d8715b5a8fdb23fef576700e71d0c253dbeddad4 || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <8062ff9d366c4bc4ae775e14eac9a769f20c60dd || >=c8a6153b6c59d95c0e091f053f6f180952ade91e <ae9c13b6fd79087cc5a216ee1649b6f012c2a238 | c83ad3dfa6d9953d5ce6839416bf5a1bfc50285a, 09723f26ed801c083e914cec4cc0e1af4b933dc7, d7e7c813834c6c05c26033456ab7169e2f9c99eb, 3755965adbb617f4283ac6ccd351ed0676843cba, d8715b5a8fdb23fef576700e71d0c253dbeddad4, 8062ff9d366c4bc4ae775e14eac9a769f20c60dd, ae9c13b6fd79087cc5a216ee1649b6f012c2a238 |
| Linux/Linuxgeneric | 5.15 | Not reported |
Published upstream
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Aug 15, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Aug 15, 2026
In the Linux kernel, the following vulnerability has been resolved: vduse: Fix race in vduse_dev_msg_sync and vduse_dev_read_iter There is one race case in vduse_dev_msg_sync and vduse_dev_read_iter: vduse_dev_read_iter(): lock(msg_lock); dequeue_msg(send_list); unlock(msg_lock); vduse_dev_msg_sync(): wait_timeout() finish lock(msg_lock); check msg->complete is false list_del(msg); <- double list_del() crash! To fix this case, we shall ensure vduse_msg is on send_list or recv_list outside the msg_lock critical section.
Quoted source text, attributed separately from HOL analysis.