CVE-2026-64060: netfs: Fix leak of request in netfs_write_begin() error handling
Published Jul 19, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix leak of request in netfswritebegin() error handling
Fix netfswritebegin() to not leak our ref on the request in the event that we get an error from netfswaitforread().
Affected Software
7 affected components
Linux Linux kernel
Linux Linux kernel>=5.18<6.18.34
Linux Linux kernel>=6.19<7.0.11
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4
Remediation
Event History
Jul 19, 2026
CVE Published
via MITRE·03:39 PM
Data Sourced
via MITRE·03:39 PM
Description
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What level of access does an attacker need to exploit this issue?
The CVSS vector indicates that exploitation requires local access and low privileges. No user interaction is required.
2
What is the likely security impact?
The reported impact is limited to availability: the request reference leak can lead to resource exhaustion. The CVSS vector reports no confidentiality or integrity impact.
3
What condition triggers the leak?
The leak occurs in netfs_write_begin() error handling when netfs_wait_for_read() returns an error.
4
What should administrators do?
Apply an available kernel patch. The listed remedy states that a patch is available.