Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2026-64062— netfs: Fix potential deadlock in write-through mode

AI Predicted 3.3 Difficulty: Moderate EPSS 0.17% · P6

Possible ATT&CK Techniques 1AI

T1211 · Exploitation for Stealth

Affected Version Matrix 10

VendorProductVersion RangeStatus
LinuxLinux288ace2f57c9d06dd2e42bd80d03747d879a4068< 1468f39243ccb155b6d97f9a9932f610d1205d75affected
288ace2f57c9d06dd2e42bd80d03747d879a4068< 003aa0dd26c964025acd6d1213bcdbd674db2ca9affected
288ace2f57c9d06dd2e42bd80d03747d879a4068< e40e9cbf3ee4d30ee9a97bd128c85500b6ad0da1affected
288ace2f57c9d06dd2e42bd80d03747d879a4068< b6a4ae1634b3ad2aaa05222e53d36da532852fafaffected
6.10affected
< 6.10unaffected
6.12.92≤ 6.12.*unaffected
6.18.34≤ 6.18.*unaffected
… +2 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-64062

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
netfs: Fix potential deadlock in write-through mode
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfs_advance_writethrough() to always unlock the supplied folio and to mark it dirty if it isn't yet written to the end. Unfortunately, it can't be marked for writeback until the folio is done with as that may cause a deadlock against mmapped reads and writes. Even though it has been marked dirty, premature writeback can't occur as the caller is holding both inode->i_rwsem (which will prevent concurrent truncation, fallocation, DIO and other writes) and ictx->wb_lock (which will cause flushing to wait and writeback to skip or wait). Note that this may be easier to deal with once the queuing of folios is split from the generation of subrequests.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Linux kernel 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel存在安全漏洞,该漏洞源于netfs在写透模式下的潜在死锁问题,可能导致系统崩溃或拒绝服务。以下版本受到影响:6.10版本
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 288ace2f57c9d06dd2e42bd80d03747d879a4068 ~ 1468f39243ccb155b6d97f9a9932f610d1205d75 -
LinuxLinux 6.10 -

II. Public POCs for CVE-2026-64062

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-64062

登录查看更多情报信息。

Patches & Fixes for CVE-2026-64062 (4)

Same Patch Batch · Linux · 2026-07-19 · 431 CVEs total

CVE-2026-6379510.0 CRITICAL9p: avoid putting oldfid in p9_client_walk() error path
CVE-2026-638009.8 CRITICALpNFS: Fix use-after-free in pnfs_update_layout()
CVE-2026-640559.8 CRITICALnet: ethernet: cortina: Carry over frag counter
CVE-2026-640569.8 CRITICALnet: ethernet: cortina: Make RX SKB per-port
CVE-2026-640619.8 CRITICALnetfs: Fix early put of sink folio in netfs_read_gaps()
CVE-2026-640669.8 CRITICALnetfs: Fix netfs_read_to_pagecache() to pause on subreq failure
CVE-2026-640679.8 CRITICALnetfs: Fix missing barriers when accessing stream->subrequests locklessly
CVE-2026-640689.8 CRITICALnetfs: Fix missing locking around retry adding new subreqs
CVE-2026-640699.8 CRITICALnetfs: Fix cancellation of a DIO and single read subrequests
CVE-2026-638089.8 CRITICALexfat: fix potential use-after-free in exfat_find_dir_entry()
CVE-2026-640899.8 CRITICALbatman-adv: tt: fix negative last_changeset_len
CVE-2026-640919.8 CRITICALbatman-adv: tt: fix TOCTOU race for reported vlans
CVE-2026-533999.8 CRITICALnfsd: release layout stid on setlease failure
CVE-2026-641429.8 CRITICALksmbd: close durable scavenger races against m_fp_list lookups
CVE-2026-533989.8 CRITICALNFSD: Fix SECINFO_NO_NAME decode error cleanup
CVE-2026-641369.8 CRITICALsmb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
CVE-2026-641329.8 CRITICALipv6: ioam: refresh hdr pointer before ioam6_event()
CVE-2026-641229.8 CRITICALnet/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover
CVE-2026-641029.8 CRITICALRDMA/siw: Reject MPA FPDU length underflow before signed receive math
CVE-2026-641139.8 CRITICALixgbevf: fix use-after-free in VEPA multicast source pruning

Showing top 20 of 431 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

V. Comments for CVE-2026-64062

No comments yet


Leave a comment