CVE-2026-64068 PUBLISHED

netfs: Fix missing locking around retry adding new subreqs

Assigner: Linux
Reserved: 19.07.2026 Published: 19.07.2026 Updated: 20.07.2026

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix missing locking around retry adding new subreqs

Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 288ace2f57c9d06dd2e42bd80d03747d879a4068 to 393f3f0d7353a94b1e0bc4ca89c683fe983e5fd2 (excl.)
  • affected from 288ace2f57c9d06dd2e42bd80d03747d879a4068 to cce18c263e9623872327ba3c956012f73c1179cc (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 6.10 is affected
  • unaffected from 0 to 6.10 (excl.)
  • unaffected from 7.0.11 to 7.0.* (incl.)
  • unaffected from 7.1 to * (incl.)

References