CVE-2026-64063

A flaw was found in the Linux kernel's netfs component. This vulnerability occurs when the netfslib performs a 'streaming write' where dirty data is stored directly into folios without prior reading. If a partially written streaming write page is entirely or partially overwritten by a subsequent write operation, the system may not correctly handle the dirty data, leading to data integrity issues. This could allow an attacker to cause data corruption.

This vulnerability is rated as Moderate severity because it requires local user access to execute specific overlapping write operations on netfslib-backed network filesystems, confining the potential impact to data corruption or denial of service without exposing confidential information. Exploitation depends on active write workloads on network filesystems configured with netfs streaming writes. Earlier releases such as Red Hat Enterprise Linux 8 and 9 are not affected because they do not contain the vulnerable folio streaming write implementation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.