CVE-2026-64040 Details
Description
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfs_mkdir() fails When vfs_mkdir() fails, the error code is not extracted from the returned error pointer. This causes mkdir_error to be reached with ret=0, which leads to returning ERR_PTR(0) (NULL) instead of a proper error pointer. Fix this by extracting the error code from the error pointer when vfs_mkdir() fails.
A vulnerability exists in the Linux kernel's cachefiles component related to improper error handling during directory creation. When the vfs_mkdir() function fails, the error code is not correctly retrieved from the error pointer. This oversight causes the error handling routine to receive a success indication (ret=0), leading to the return of a null pointer instead of a valid error reference. The issue has been addressed by modifying the error handling to properly extract and return the error code when directory creation fails.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/0940108d27c6995e02819ff832be11892f0b208b | kernel.org | Patch |
| https://git.kernel.org/stable/c/86f4c1586418d50203ee8d76cba5d7b148719a32 | kernel.org | |
| https://git.kernel.org/stable/c/8a220d1c312c66194f4a33dd52d1fba42bc2b341 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-252 | Unchecked Return Value | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.15, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
3 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 15, 2026 | CVE Modified | kernel.org |
| Oct 6, 2026 | Initial Analysis | [email protected] |
| Jul 19, 2026 | New CVE Received | kernel.org |