CVE Database›Document archive›CVE-2026-64157

CVE-2026-64157

kernel: netfs: Fix partial invalidation of streaming-write folio

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · July 19, 2026

Updated · October 30, 2026

Description

A flaw was found in the Linux kernel's network file system (netfs) component. This vulnerability allows for incorrect handling of data during partial invalidation operations on streaming-write pages. An attacker could potentially exploit this to cause data corruption or unexpected system behavior, impacting data integrity.

Statement

This vulnerability is rated as Moderate because exploitation requires local authenticated access with standard user privileges and is restricted to causing data inconsistency or system instability rather than arbitrary code execution. The issue originates in the network filesystem (netfs) caching framework during partial invalidation of streaming writes. Red Hat Enterprise Linux 8 and 9 are unaffected as they lack the newer streaming-write implementation.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-823 · Use of Out-of-range Pointer Offset