CVE-2026-64068: netfs: Fix missing locking around retry adding new subreqs
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix missing locking around retry adding new subreqs
Fix netfsretryreadsubrequests() and netfsretrywritestream() to take the appropriate lock when adding extra subrequests into stream->subrequests.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64068?
CVE-2026-64068 has a critical severity rating of 9.8 according to the CVSS 3.1 scoring system.
How do I fix CVE-2026-64068?
To fix CVE-2026-64068, ensure that your Linux kernel is updated to the latest version that contains the patch for this vulnerability.
What are the potential impacts of CVE-2026-64068?
CVE-2026-64068 can lead to data corruption and unauthorized access due to improper locking mechanisms in the Linux kernel.
Who is affected by CVE-2026-64068?
Any systems running vulnerable versions of the Linux kernel that utilize netfs are affected by CVE-2026-64068.
What components are involved in CVE-2026-64068?
CVE-2026-64068 specifically involves the netfs component in the Linux kernel responsible for managing subrequests.