CVE-2026-64160 PUBLISHED

netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

Assigner: Linux
Reserved: 19.07.2026 Published: 19.07.2026 Updated: 20.07.2026

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

Fix potential tearing in using ->remote_i_size and ->zero_point by copying i_size_read() and i_size_write() and using the same seqcount as for i_size.

We need to make sure that netfslib and the filesystems that use it always hold i_lock whilst updating any of the sizes to prevent i_size_seqcount from getting corrupted.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS Score: 9.8

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from 4058f742105ecfcbdf99e1139e6c1f74fb8e6db9 to 55970f238d495517edc961d55c44c772594d0969 (excl.)
  • affected from 4058f742105ecfcbdf99e1139e6c1f74fb8e6db9 to 2c8f4742bb76117d735f92a3932d85239b16c494 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 5.18 is affected
  • unaffected from 0 to 5.18 (excl.)
  • unaffected from 7.0.11 to 7.0.* (incl.)
  • unaffected from 7.1 to * (incl.)

References