CVE-2026-64064

A flaw was found in the Linux kernel's netfs component. When a streaming write operation is performed, a memory page folio can remain marked as 'dirty' even after the associated data is removed by a file truncation. If this dirty page is subsequently accessed through a memory-mapped file mmap, th...

CVE-2026-64158

A flaw was found in the netfs component of the Linux kernel. The write streaming feature, which caches dirty data to avoid unnecessary reads, was incorrectly disabled when a file descriptor was opened with ORDWR read-write mode. This incorrect disabling was based on an outdated assumption that...

Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`

Summary axios’ fetch adapter does not enforce maxBodyLength for live WHATWG ReadableStream request bodies whose size cannot be determined before dispatch. Applications that use adapter: "fetch" and rely on maxBodyLength to cap untrusted upload/proxy streams can send the full stream even when it...

CVE-2026-64063

A flaw was found in the Linux kernel's netfs component. This vulnerability occurs when the netfslib performs a 'streaming write' where dirty data is stored directly into folios without prior reading. If a partially written streaming write page is entirely or partially overwritten by a subsequent...

CVE-2026-64157

A flaw was found in the Linux kernel's network file system netfs component. This vulnerability allows for incorrect handling of data during partial invalidation operations on streaming-write pages. An attacker could potentially exploit this to cause data corruption or unexpected system behavior,...

Important: python3.11

Issue Overview: When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value. CVE-2026-0864 When using the...

Important: python3.14

Issue Overview: When using the "tarfile" module with a file opened in "streaming mode" mode="r|" the tarfile module did not properly handle EOF, making archive parsing take exponentially longer. CVE-2026-11972 Affected Packages: python3.14 Issue Correction: Run dnf update python3.14 --releasever...

Important: python3.9

Issue Overview: When using the "configparser" module to write configuration files containing multi-line text values with carriage return characters \r the resulting file could be injected with unexpected keys and values if the attacker controls the written value. CVE-2026-0864 tarfile.extractall...

Linux Distros Unpatched Vulnerability : CVE-2026-64158

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - netfs: Fix write streaming disablement if fd open ORDWR In netfsperformwrite, write streaming the caching of dirty data in dirty but !uptodate folios is perform...

Linux Distros Unpatched Vulnerability : CVE-2026-64063

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing,...

Linux Distros Unpatched Vulnerability : CVE-2026-64157

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the...

CVE-2026-64157

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfsinvalidatefolio, if the region of a partial invalidation overlaps the front but not all of a dirty write cached in a streaming write page dirty, but not uptodate,...

CVE-2026-64158

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

CVE-2026-64063

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix streaming write being overwritten In order to avoid reading whilst writing, netfslib will allow "streaming writes" in which dirty data is stored directly into folios without reading them first. Such folios are marked...

CVE-2026-64158

...

CVE-2026-64158

CVE-2026-64158 has been rejected or withdrawn by its CVE Numbering Authority. However, the underlying fix is present in vendor kernel updates. The fix addresses the netfs subsystem in the Linux kernel , specifically correcting write streaming disablement when a file descriptor is opened with O_RD...

EUVD-2026-45843

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd open ORDWR In netfsperformwrite, "write streaming" the caching of dirty data in dirty but !uptodate folios is performed to avoid the need to read data that is just going to get...

CVE-2026-64158

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd open ORDWR In netfsperformwrite, "write streaming" the caching of dirty data in dirty but !uptodate folios is performed to avoid the need to read data that is just going to get...

CVE-2026-64158

Removed by vendor...

CVE-2026-64158 netfs: Fix write streaming disablement if fd open O_RDWR

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix write streaming disablement if fd open ORDWR In netfsperformwrite, "write streaming" the caching of dirty data in dirty but !uptodate folios is performed to avoid the need to read data that is just going to get...