The vulnerability (CVE-2026-64596) in the Linux kernel's libfs subsystem involved the absence of SB_I_NOEXEC and SB_I_NODEV flags in pseudo-filesystem mounts created by init_pseudo(), leading to warnings when anonymous-inode files backed by dma-buf were mmap'd without the SB_I_NOEXEC flag set. This could allow executable mappings of pseudo-filesystem file descriptors, which is now prevented by setting these flags by default. The fix was implemented starting with Linux kernel 7.0.0 and later versions. This vulnerability is part of a larger set of kernel security issues addressed in Ubuntu Linux kernel updates for various architectures and subsystems. The vendor advisory confirms patch availability and recommends updating to specific kernel package versions.

If unpatched, the vulnerability could allow executable mappings of pseudo-filesystem file descriptors, potentially violating expected security invariants. However, no known exploits are reported in the wild. The issue is part of multiple kernel security flaws that could be used by a local attacker to compromise system integrity or escalate privileges. The update mitigates these risks by enforcing stricter mount flags and other fixes across kernel subsystems.

A patch is available and included in Linux kernel versions 7.0.0-31.31 and later for the linux-hwe-edge package and related kernel packages. Users should update their systems to the fixed kernel versions listed in the Ubuntu security advisories USN-8726-1 and USN-8727-1. After updating, a system reboot is required. Due to an ABI change, all third-party kernel modules must be recompiled and reinstalled. Following these steps will mitigate the vulnerability.