smb: client: fix busy dentry warning on unmount after DIO
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix busy dentry warning on unmount after DIO Commit c68337442f03 ("cifs: Fix busy dentry used after unmounting") fixed the issue in cifs where deferred close of a file led to a dentry reference count not being released in umount, by flushing deferredclose_wq in cifs_kill_sb() to solve it. However, the cifs DIO path suffers from the same busy-dentry problem caused by a delayed dentry reference-count release: [dio] [cifsd] [close + umount] netfs_unbuffered_write_iter_locked ... cifs_demultiplex_thread netfs_unbuffered_write cifs_issue_write netfs_wait_for_in_progress_stream [1] ... netfs_write_subrequest_terminated netfs_subreq_clear_in_progress netfs_wake_collector // wake [1] netfs_put_subrequest netfs_put_request queue_work(system_dfl_wq, xxx) [2] // dio write return cifs_close _cifsFileInfo_put // cfile->count 2->1 --cfile->count [3] // umount cifs_kill_sb kill_anon_super // warning triggered! shrink_dcache_for_umount [4] [system_dfl_wq] [5] netfs_free_request ... _cifsFileInfo_put // cfile->count 1->0 --cfile->count queue_work(fileinfo_put_wq, xxx) [fileinfo_put_wq] [6] cifsFileInfo_put_work cifsFileInfo_put_final dput If the umount path is triggered before [5], it results warning: BUG: Dentry 00000000eab1f070{i=9a917b66ae404fec,n=test} still in use (1) [unmount of cifs cifs] The existing per-inode ictx->io_count wait in cifs_evict_inode() does not help: it lives in the inode eviction path, wh
CVE-2026-72315
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-72315
Linux
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Linux
Source reference: /containers/cna/affected/1/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "0e4b8faaaebe3137bec5723ef2b3cb0437fb38fd",
"lessThan": "f7748b551010c021d92f0125e37f32ac0c376d8a",
"versionType": "git"
},
{
"status": "affected",
"version": "f655467a9973f964b267871e5fef533ad5014494",
"lessThan": "9fc87899276af941ecf3045798887db7deb85605",
"versionType": "git"
},
{
"status": "affected",
"version": "340cea84f691c5206561bb2e0147158fe02070be",
"lessThan": "f0eac9c3c3711f24efc2aaf12b8ec3e54a38c214",
"versionType": "git"
},
{
"status": "affected",
"version": "340cea84f691c5206561bb2e0147158fe02070be",
"lessThan": "75f5c412fa867efa0bf9b646bffe0d912109e84a",
"versionType": "git"
},
{
"status": "affected",
"version": "708c276f516d27beaded7f372ac8111cee43926c",
"versionType": "git"
},
{
"status": "affected",
"version": "0629a1a187e424373364d681b42b101894bdb548",
"versionType": "git"
},
{
"status": "affected",
"version": "30afc6ea72cc6cf7c8d579e79b64232801c38d08",
"versionType": "git"
},
{
"status": "affected",
"version": "6.12.78",
"lessThan": "6.12.112",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.18.20",
"lessThan": "6.18.54",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.167",
"lessThan": "6.2",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.6.130",
"lessThan": "6.7",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.19.10",
"lessThan": "6.20",
"versionType": "semver"
}
],
"programFiles": [
"fs/smb/client/cifs_fs_sb.h",
"fs/smb/client/cifsfs.c",
"fs/smb/client/connect.c",
"fs/smb/client/file.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "7.0"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "7.0",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.12.112",
"versionType": "semver",
"lessThanOrEqual": "6.12.*"
},
{
"status": "unaffected",
"version": "6.18.54",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.1.5",
"versionType": "semver",
"lessThanOrEqual": "7.1.*"
},
{
"status": "unaffected",
"version": "7.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"fs/smb/client/cifs_fs_sb.h",
"fs/smb/client/cifsfs.c",
"fs/smb/client/connect.c",
"fs/smb/client/file.c"
],
"defaultStatus": "affected"
}
]- Related CVEs
- CVE-2026-72315
Source reference:
/cveMetadata/cveId
Publisher severity
high
Source reference: /containers/cna/metrics
- Event
- #8250 · Revision 1
- Added to Heist Feed
- Publisher date