CVE-2026-64216

A flaw was found in the netfs component of the Linux kernel. A local user, by interacting with a mounted netfs filesystem, could trigger a Use-After-Free (UAF) vulnerability. This flaw occurs when the system attempts to unlock abandoned read pages, potentially leading to a kernel crash and a denial of service. In some cases, this could also result in memory corruption, allowing for information disclosure or data manipulation.

This vulnerability is rated with a Moderate severity because exploitation requires local access and relies on triggering race conditions during concurrent I/O operations on filesystems utilizing netfs. An attacker must have permissions to interact with active network filesystem mounts to cause premature memory dereferencing. While successful exploitation can result in kernel memory corruption or a denial-of-service condition via a system crash, it cannot be leveraged directly across the network.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.