CVE-2026-64065

A flaw was found in the Linux kernel's network file system (netfs) component. This vulnerability, located in the netfs_write_begin() function, can be triggered by a local user through specific file system operations. Successful exploitation leads to a kernel bug and system crash, resulting in a denial of service (DoS) for the affected system.

This vulnerability is rated Moderate rather than Important because exploitation requires authenticated local access to trigger a page cache race condition and is limited to causing a denial of service via a kernel panic, with no risk of privilege escalation or data corruption. The issue only impacts environments utilizing the kernel network filesystem (netfs) support layer during active write operations on supported network storage mounts. Older enterprise platforms, including Red Hat Enterprise Linux 8 and 9, do not include the vulnerable code and are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.