CVE-2026-64157

Analyzed Analyzed - Analysis Complete

netfs Partial Invalidation Flaw in Linux Kernel

Publication date: 2026-07-19

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_invalidate_folio(), if the region of a partial invalidation overlaps the front (but not all) of a dirty write cached in a streaming write page (dirty, but not uptodate, with the dirty region tracked by a netfs_folio struct), the function modifies the dirty region - but incorrectly as it moves the region forward by setting the start to the start, not the end, of the invalidation region. Fix this by setting finfo->dirty_offset to the end of the invalidation region (iend).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-19

Last Modified

2026-08-17

Generated

2026-08-29

AI Q&A

2026-07-19

EPSS Evaluated

2026-08-28

NVD

CVE-2026-64157

EUVD

EUVD-2026-45842

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	6.11
linux	linux_kernel	6.11
linux	linux_kernel	6.11
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	7.1
linux	linux_kernel	From 6.13 (inc) to 6.18.34 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.0.11 (exc)
linux	linux_kernel	From 6.10.8 (inc) to 6.11 (exc)
linux	linux_kernel	From 6.11.1 (inc) to 6.12.92 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability affecting the netfs subsystem. It involves incorrect handling of partial invalidation in streaming-write folios. When a partial invalidation overlaps the front of a dirty write cached in a streaming write page, the function modifies the dirty region incorrectly by moving the start position instead of the end.

Detection Guidance

This vulnerability is specific to the Linux kernel's netfs subsystem and may not have direct detection commands. Monitor kernel logs for errors related to netfs_invalidate_folio or streaming write operations. Check for filesystem corruption or unexpected behavior in applications using network filesystems.

Impact Analysis

This vulnerability could lead to data corruption or unexpected behavior in file operations involving network filesystems. It may cause applications to read stale or incorrect data from cache, potentially leading to crashes or incorrect results.

Compliance Impact

This vulnerability affects data integrity in the Linux kernel's netfs component, which could lead to improper handling of cached write data. While not directly impacting GDPR or HIPAA compliance, such integrity issues may indirectly affect data protection measures by risking unauthorized data access or corruption during processing.

Mitigation Strategies

Apply the latest kernel patches or updates that include the fix for this issue. If immediate patching is not possible, consider disabling streaming write operations in affected filesystems as a temporary workaround.

Hi! I’m here to help you understand CVE-2026-64157. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70