CVE-2026-64058: netfs: Fix netfs_read_folio() to wait on writeback
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix netfsreadfolio() to wait on writeback
Fix netfsreadfolio() to wait for an ongoing writeback to complete so that it can trust the dirty flag and whatever is attached to folio->private (folio->private may get cleaned up by the collector before it clears the writeback flag).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.176-1Fixed in 6.1.190-1Fixed in 6.12.113-1Fixed in 7.2.12-1Fixed in 7.2.13-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.113-1~deb12u1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.110 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.34 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.0.11
Event History
Frequently Asked Questions
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates local access and low privileges are required. No user interaction is required.
What is the potential impact if exploited?
The listed CVSS vector rates confidentiality, integrity, and availability impacts as high. The issue involves a race between netfs folio reads and ongoing writeback, where state associated with the folio may be cleaned up before writeback is marked complete.
Is a fix available?
Yes. A patch is available, with fixes referenced in the Linux stable kernel repository.