CVE-2026-64160: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix potential for tearing in ->remoteisize and ->zeropoint
Fix potential tearing in using ->remoteisize and ->zeropoint by copying isizeread() and isizewrite() and using the same seqcount as for isize.
We need to make sure that netfslib and the filesystems that use it always hold ilock whilst updating any of the sizes to prevent isizeseqcount from getting corrupted.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64160?
CVE-2026-64160 has a risk rating of 16.
What are the potential impacts of CVE-2026-64160?
CVE-2026-64160 can lead to data inconsistency and potential system instability due to tearing in remote_i_size and zero_point.
How do I fix CVE-2026-64160?
To fix CVE-2026-64160, update your Linux kernel to the latest version that includes the patch for this vulnerability.
When was CVE-2026-64160 published?
CVE-2026-64160 was published on July 19, 2026.
Which software is affected by CVE-2026-64160?
CVE-2026-64160 affects the Linux kernel.