CVE-2026-64157: netfs: Fix partial invalidation of streaming-write folio
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix partial invalidation of streaming-write folio
In netfsinvalidatefolio(), if the region of a partial invalidation overlaps the front (but not all) of a dirty write cached in a streaming write page (dirty, but not uptodate, with the dirty region tracked by a netfsfolio struct), the function modifies the dirty region - but incorrectly as it moves the region forward by setting the start to the start, not the end, of the invalidation region.
Fix this by setting finfo->dirtyoffset to the end of the invalidation region (iend).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
In netfs_invalidate_folio(), when handling partial invalidation, modify the dirty region by setting finfo->dirty_offset to the end of the invalidation region (iend) instead of moving the region forward by setting the start of the invalidation.
Linux kernel netfs_invalidate_folio() finfo->dirty_offset = set to the end of the invalidation region (iend)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64157?
CVE-2026-64157 has a risk rating of 27, indicating a moderate severity impact.
How do I fix CVE-2026-64157?
To fix CVE-2026-64157, ensure your Linux kernel is updated to the latest version where this vulnerability has been addressed.
What systems are affected by CVE-2026-64157?
CVE-2026-64157 affects systems running specific versions of the Linux kernel that include the netfs functionalities.
What is the impact of CVE-2026-64157?
The impact of CVE-2026-64157 is related to the improper handling of partial invalidation in streaming-write folios, which may lead to data inconsistencies.
When was CVE-2026-64157 published?
CVE-2026-64157 was published on July 19, 2026.