CVE-2026-64157
Received Received - Intake

netfs Partial Invalidation Flaw in Linux Kernel

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_invalidate_folio(), if the region of a partial invalidation overlaps the front (but not all) of a dirty write cached in a streaming write page (dirty, but not uptodate, with the dirty region tracked by a netfs_folio struct), the function modifies the dirty region - but incorrectly as it moves the region forward by setting the start to the start, not the end, of the invalidation region. Fix this by setting finfo->dirty_offset to the end of the invalidation region (iend).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-64157
EUVD
EUVD-2026-45842

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability affecting the netfs subsystem. It involves incorrect handling of partial invalidation in streaming-write folios. When a partial invalidation overlaps the front of a dirty write cached in a streaming write page, the function modifies the dirty region incorrectly by moving the start position instead of the end.

Detection Guidance

This vulnerability is specific to the Linux kernel's netfs subsystem and may not have direct detection commands. Monitor kernel logs for errors related to netfs_invalidate_folio or streaming write operations. Check for filesystem corruption or unexpected behavior in applications using network filesystems.

Impact Analysis

This vulnerability could lead to data corruption or unexpected behavior in file operations involving network filesystems. It may cause applications to read stale or incorrect data from cache, potentially leading to crashes or incorrect results.

Compliance Impact

This vulnerability affects data integrity in the Linux kernel's netfs component, which could lead to improper handling of cached write data. While not directly impacting GDPR or HIPAA compliance, such integrity issues may indirectly affect data protection measures by risking unauthorized data access or corruption during processing.

Mitigation Strategies

Apply the latest kernel patches or updates that include the fix for this issue. If immediate patching is not possible, consider disabling streaming write operations in affected filesystems as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-64157. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart