CVE-2026-64062: netfs: Fix potential deadlock in write-through mode

Published Jul 19, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix potential deadlock in write-through mode

Fix netfsadvancewritethrough() to always unlock the supplied folio and to mark it dirty if it isn't yet written to the end. Unfortunately, it can't be marked for writeback until the folio is done with as that may cause a deadlock against mmapped reads and writes.

Even though it has been marked dirty, premature writeback can't occur as the caller is holding both inode->irwsem (which will prevent concurrent truncation, fallocation, DIO and other writes) and ictx->wblock (which will cause flushing to wait and writeback to skip or wait).

Note that this may be easier to deal with once the queuing of folios is split from the generation of subrequests.

Affected Software

8 affected components
Linux Linux kernel
Linux Linux kernel>=6.10<6.12.92
Linux Linux kernel>=6.13<6.18.34
Linux Linux kernel>=6.19<7.0.11
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4

Event History

Jul 19, 2026
CVE Published
via MITRE·03:39 PM
Data Sourced
via MITRE·03:39 PM
Description
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What access would an attacker need to trigger this issue?

The CVSS vector indicates local access and low privileges are required. No user interaction is required.

2

What is the practical impact if the issue is triggered?

The reported impact is a potential deadlock in netfs write-through mode, with availability impact rated High. The CVSS vector reports no confidentiality or integrity impact.

3

Which activity and configuration are implicated?

The issue concerns Linux kernel netfs write-through mode during folio write handling. The provided information does not state whether write-through mode is enabled by default.

4

What can be done if patching cannot happen immediately?

The provided data identifies write-through mode as the affected condition, but does not provide a documented workaround or mitigation. A patch is available.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203