CVE-2026-64058

A flaw was found in the Linux kernel's network file system (netfs) component. The netfs_read_folio() function fails to wait for ongoing writeback operations to complete. This can lead to the system incorrectly trusting the dirty flag and prematurely cleaning up private data associated with a folio, potentially resulting in data integrity issues or unexpected system behavior.

netfs_read_folio() could inspect dirty state and folio private data while writeback was still in progress. The writeback collector may clean folio private before the writeback flag is cleared, so a concurrent read path can make decisions using inconsistent folio state. For the CVSS the PR:L is used because a local process with access to files on an affected netfs backed mount is needed to trigger the read/writeback race. The issue is not directly network reachable even though the backing filesystem may use network storage. Impact is primarily local data integrity loss or I/O disruption.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.