CVE-2026-64185: sysfs: don't remove existing directory on update failure
In the Linux kernel, the following vulnerability has been resolved:
sysfs: don't remove existing directory on update failure
When sysfsupdategroup() is called for a named group and createfiles() fails (e.g. -ENOMEM), internalcreategroup() calls kernfsremove(kn) on the group directory. In the update path, kn was obtained via kernfsfindandget() and refers to a directory that already existed before this call. Removing it silently destroys a sysfs group that the caller did not create.
Only remove the directory if we created it ourselves. On update failure the directory remains as it is left empty by removefiles() inside createfiles(), but can be repopulated by a retry.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-64185?
CVE-2026-64185 has a risk rating of 26, indicating a moderate level of severity.
How do I fix CVE-2026-64185?
To resolve CVE-2026-64185, update to the latest version of the Linux kernel that contains the patch for this vulnerability.
What systems are affected by CVE-2026-64185?
CVE-2026-64185 affects the Linux kernel, specifically systems utilizing the sysfs interface.
When was CVE-2026-64185 published?
CVE-2026-64185 was published on July 19, 2026.
What is the main issue addressed in CVE-2026-64185?
CVE-2026-64185 addresses the problem of sysfs_update_group() improperly removing existing directories on update failures.