CVE-2026-64059: netfs: Fix folio->private handling in netfs_perform_write()

Published Jul 19, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix folio->private handling in netfsperformwrite()

Under some circumstances, netfsperformwrite() doesn't correctly manipulate folio->private between NULL, NETFSFOLIOCOPYTOCACHE, pointing to a group and pointing to a netfsfolio struct, leading to potential multiple attachments of private data with associated folio ref leaks and also leaks of netfsfolio structs or netfsgroup refs.

Fix this by consolidating the place at which a folio is marked uptodate in one place and having that look at what's attached to folio->private and decide how to clean it up and then set the new group. Also, the content shouldn't be flushed if group is NULL, even if a group is specified in the netfsgroup parameter, as that would be the case for a new folio. A filesystem should always specify netfsgroup or never specify netfsgroup.

The Sashiko auto-review tool noted that it was theoretically possible that the fpos >= ctx->zeropoint section might leak if it modified a streaming write folio. This is unlikely, but with a network filesystem, third party changes can happen. It also pointed out that netfssetgroup() would leak if called multiple times on the same folio from the "whole folio modify section".

Affected Software

8 affected components
Linux Kernel
Linux Linux kernel>=6.12<6.12.92
Linux Linux kernel>=6.13<6.18.34
Linux Linux kernel>=6.19<7.0.11
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4

Event History

Jul 19, 2026
CVE Published
via MITRE·03:39 PM
Data Sourced
via MITRE·03:39 PM
Description
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityAffected Software

Frequently Asked Questions

1

What level of access is needed to exploit this issue?

The CVSS vector indicates local access and low privileges are required. No user interaction is required.

2

What is the expected security impact?

The CVSS assessment indicates a high availability impact, with no confidentiality or integrity impact.

3

What should operators do to remediate this issue?

Apply the available Linux kernel patch. The supplied references identify stable kernel commits containing the fix.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203