by Kastro
Paper/Archive/CVE-2026-64068

CVE-2026-64068

Linux Linux — netfs: Fix missing locking around retry adding new subreqs

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 28.9.289 × 205.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.

Affected

ProductAffectedFixed inSource
Linux288ace2f57c9d06dd2e42bd80d03747d879a4068 – < f59c4ec86ef3a9ac99706ae163a38ec28129fd76f59c4ec86ef3a9ac99706ae163a38ec28129fd76CNA
Linux288ace2f57c9d06dd2e42bd80d03747d879a4068 – < d5c9d19b0ff2f7153532ac238a5e96fed2df315cd5c9d19b0ff2f7153532ac238a5e96fed2df315cCNA
Linux288ace2f57c9d06dd2e42bd80d03747d879a4068 – < 393f3f0d7353a94b1e0bc4ca89c683fe983e5fd2393f3f0d7353a94b1e0bc4ca89c683fe983e5fd2CNA
Linux288ace2f57c9d06dd2e42bd80d03747d879a4068 – < cce18c263e9623872327ba3c956012f73c1179cccce18c263e9623872327ba3c956012f73c1179ccCNA
Linux6.106.12.114CNA

Scores by source

Linux (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refgit.kernel.org/stable/c/f59c4ec86ef3a9ac99706ae163a38ec28129fd76refgit.kernel.org/stable/c/d5c9d19b0ff2f7153532ac238a5e96fed2df315crefgit.kernel.org/stable/c/393f3f0d7353a94b1e0bc4ca89c683fe983e5fd2refgit.kernel.org/stable/c/cce18c263e9623872327ba3c956012f73c1179cc