CVE-2026-64157 Details
Description
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_invalidate_folio(), if the region of a partial invalidation overlaps the front (but not all) of a dirty write cached in a streaming write page (dirty, but not uptodate, with the dirty region tracked by a netfs_folio struct), the function modifies the dirty region - but incorrectly as it moves the region forward by setting the start to the start, not the end, of the invalidation region. Fix this by setting finfo->dirty_offset to the end of the invalidation region (iend).
A vulnerability exists in the Linux kernel's netfs component, specifically in the handling of partial invalidations of streaming-write folios. When a partial invalidation overlaps with dirty write data cached in a streaming write page, the netfs_invalidate_folio() function incorrectly adjusts the dirty region by moving it forward, rather than properly aligning it with the end of the invalidation. This issue affects several versions of the Linux kernel.
Users can apply the latest patches available in the Linux kernel stable tree to address this vulnerability.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/3d9601c029b934b5b6a10f99791467b10eb6b211 | kernel.org | Patch |
| https://git.kernel.org/stable/c/6a3d27116be2c5fb9a03d5cf37c486ac517f3689 | kernel.org | Patch |
| https://git.kernel.org/stable/c/6d91acc7fb85d33ea58fca9b964a32a453937f4b | kernel.org | Patch |
| https://git.kernel.org/stable/c/f6b2569ae29b666fd15ff2848684c445ba442a39 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.10.8, < 6.11 >= 6.11.1, < 6.12.92 >= 6.13, < 6.18.34 >= 6.19, < 7.0.11 6.11 - 6.11 rc6 6.11 rc7 7.1 rc1 7.1 rc2 7.1 rc3 7.1 rc4 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Aug 17, 2026 | Initial Analysis | [email protected] |
| Jul 19, 2026 | New CVE Received | kernel.org |