CVE-2026-64060
kernel: netfs: Fix leak of request in netfs_write_begin() error handling
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · September 3, 2026
Description
A flaw was found in the netfs component of the Linux kernel. An issue in the error handling of the netfs_write_begin() function can lead to a leak of a request resource. This occurs when an error is returned from netfs_wait_for_read(), preventing the proper release of the resource. This resource leak may result in system instability or a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-772 · Missing Release of Resource after Effective Lifetime