CVE-2026-64062
Received Received - Intake

Fix potential deadlock in Linux kernel netfs write-through mode

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfs_advance_writethrough() to always unlock the supplied folio and to mark it dirty if it isn't yet written to the end. Unfortunately, it can't be marked for writeback until the folio is done with as that may cause a deadlock against mmapped reads and writes. Even though it has been marked dirty, premature writeback can't occur as the caller is holding both inode->i_rwsem (which will prevent concurrent truncation, fallocation, DIO and other writes) and ictx->wb_lock (which will cause flushing to wait and writeback to skip or wait). Note that this may be easier to deal with once the queuing of folios is split from the generation of subrequests.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64062
EUVD
EUVD-2026-45635

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where a potential deadlock could occur in write-through mode due to improper handling of folios in the netfs subsystem. The function netfs_advance_writethrough() fails to always unlock the folio and mark it dirty if not fully written, which could lead to system hangs under specific conditions.

Detection Guidance

This vulnerability is specific to the Linux kernel's netfs component and may not have direct detection commands. Monitor kernel logs for deadlock warnings or filesystem errors related to netfs operations. Check for stalled write operations or processes stuck in 'D' state.

Impact Analysis

This vulnerability may cause system freezes or hangs during file operations, particularly when writing data in write-through mode. It could disrupt normal system operations and require a reboot to recover, depending on the affected workload.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a low-level kernel deadlock issue in write-through mode for the Linux netfs subsystem. No data exposure or integrity risks are described that would impact regulatory compliance.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for CVE-2026-64062. Avoid using write-through mode for netfs operations if possible until patched. Monitor system performance for signs of deadlocks or hangs.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64062. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart