CVE-2026-64156 Details
Description
In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfs_write_single() and afs_single_writepages() to better handle a write that would be skipped due to lock contention and WB_SYNC_NONE by returning 1 from netfs_write_single() if it skipped and making afs_single_writepages() skip also. If a skip occurs, the inode must be re-marked as the VFS may have cleared the mark. This is really only theoretical for directories in netfs_write_single() as the only path to that is through afs_single_writepages() that takes the ->validate_lock around it, thereby serialising it.
A vulnerability in the Linux kernel's handling of write operations in the netfs and AFS file systems has been addressed. The issue arose because the writeback functions netfs_write_single() and afs_single_writepages() did not properly manage writes that were skipped due to lock contention and a specific writeback synchronization mode. This could lead to inconsistencies, as the virtual file system (VFS) might have cleared the dirty inode mark after a skipped write, potentially causing data loss. The vulnerability was primarily theoretical for directories, as the issue could only be encountered through a serialized path that validated locks, complicating write operations.
Users can upgrade to the latest version of the Linux kernel where this vulnerability has been fixed. Instructions for downloading the patched version are available on the Linux kernel's official website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/77bb293049d61e04c12b24ebbffafaf5ab36af90 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9871938f99cc6cb266a77265491660e2375271f5 | kernel.org | Patch |
| https://git.kernel.org/stable/c/f91e10435c0dd37c48b1b25e6236284f656ddc0c | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.14, < 6.18.34 >= 6.19, < 7.0.11 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 13, 2026 | Initial Analysis | [email protected] |
| Jul 19, 2026 | New CVE Received | kernel.org |