CVE-2026-64216

CVE-2026-64216: Linux kernel netfs UAF fix. The issue occurs in netfs_unlock_abandoned_read_pages() (and netfs_unlock_read_folio()) where the code dereferenced an index after NETFS_RREQ_IN_PROGRESS was cleared, risking access to the folio protected by no_unlock_folio. The fix stores the folio poi...

SUSE CVE-2026-64060

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfswritebegin error handling Fix netfswritebegin to not leak our ref on the request in the event that we get an error from netfswaitforread...

SUSE CVE-2026-64065

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudo ./check generic/013 done...

CVE-2026-64065

A flaw was found in the Linux kernel's network file system netfs component. This vulnerability, located in the netfswritebegin function, can be triggered by a local user through specific file system operations. Successful exploitation leads to a kernel bug and system crash, resulting in a denial ...

Linux Distros Unpatched Vulnerability : CVE-2026-64065

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013...

CVE-2026-64065

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudo ./check generic/013 done...

CVE-2026-64060

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfswritebegin error handling Fix netfswritebegin to not leak our ref on the request in the event that we get an error from netfswaitforread...

CVE-2026-64065 netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudo ./check generic/013 done...

CVE-2026-64065

CVE-2026-64065 affects the Linux kernel's netfs subsystem , specifically a VM_BUG_ON_FOLIO() assertion failure in netfs_write_begin() . The root cause is that folio_unlock() is called on an already-unlocked folio (at mm/filemap.c:1504), triggered through the Ceph filesystem write path (ceph_write...

CVE-2026-64065

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudo ./check generic/013 done...

CVE-2026-64065 netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VMBUGONFOLIO issue in netfswritebegin call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudo ./check generic/013 done...

EUVD-2026-45633

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfswritebegin error handling Fix netfswritebegin to not leak our ref on the request in the event that we get an error from netfswaitforread...

CVE-2026-64060

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfswritebegin error handling Fix netfswritebegin to not leak our ref on the request in the event that we get an error from netfswaitforread...

CVE-2026-64060

CVE-2026-64060 is a reference-counting bug in the Linux kernel's netfs subsystem . The function netfs_write_begin() fails to drop its reference on a request object when netfs_wait_for_read() returns an error, resulting in a resource leak (memory/pointer leak) on each failed write path. The NVD-as...

CVE-2026-64060 netfs: Fix leak of request in netfs_write_begin() error handling

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfswritebegin error handling Fix netfswritebegin to not leak our ref on the request in the event that we get an error from netfswaitforread...

CVE-2026-64060 netfs: Fix leak of request in netfs_write_begin() error handling

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfswritebegin error handling Fix netfswritebegin to not leak our ref on the request in the event that we get an error from netfswaitforread...

PT-2026-61382

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0-rc1 Description A kernel BUG occurs in the netfs component due to a VM BUG ON FOLIO issue within the netfs write begin function. This issue is triggered when folio unlock is called on a folio that is not locked,...

PT-2026-61377

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak occurs in the netfs write begin function during error handling. Specifically, the system fails to release the reference to the request when an error is returned from the...

DEBIAN-CVE-2022-50094

In the Linux kernel, the following vulnerability has been resolved: spmi: trace: fix stack-out-of-bound access in SPMI tracing functions tracespmiwritebegin and tracespmireadend both call memcpy with a length of "len + 1". This leads to one extra byte being read beyond the end of the specified...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: Keep write operations atomic syzbot reported a NULL pointer dereference in genericfilewriteiter. 1 Before the write operation is completed, the user executes ioctl2 to clear the compress flag of the file, which causes t...