Threats Tagged 'cve-2026-64064'

A vulnerability in the Linux kernel's netfs subsystem was fixed by correcting the netfs_invalidate_folio() function to properly clear the dirty bit when all changes to a folio are removed. The flaw could cause a kernel oops due to a stale dirty flag and missing netfs_folio struct after file truncation and subsequent mmap() reads. This issue has been addressed in updated Linux kernel versions. The vulnerability has a medium severity with a CVSS score of 5.5 and does not affect confidentiality or integrity but impacts availability. A patch is available and should be applied to affected kernel versions.

A vulnerability in the Linux kernel's netfs subsystem was resolved by fixing netfs_invalidate_folio() to clear the dirty bit when all changes to a folio are removed. Without this fix, truncating a file after a streaming write could leave a folio marked dirty without the associated netfs_folio struct, causing a kernel oops when the folio is read via mmap(). This issue could be reproduced under specific conditions involving streaming writes, truncation, and memory mapping. The fix involves calling folio_cancel_dirty() to clear the dirty flag appropriately.