CVE-2026-64068

netfs: Fix missing locking around retry adding new subreqs

State: Published
Severity: 9.8 Critical
Published: Jul 19, 2026
Updated: Oct 21, 2026
Reserved: Jul 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix missing locking around retry adding new subreqs

Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	288ace2f57c9d06dd2e42bd80d03747d879a4068 to before f59c4ec86ef3a9ac99706ae163a38ec28129fd76Affected 288ace2f57c9d06dd2e42bd80d03747d879a4068 to before d5c9d19b0ff2f7153532ac238a5e96fed2df315cAffected 288ace2f57c9d06dd2e42bd80d03747d879a4068 to before 393f3f0d7353a94b1e0bc4ca89c683fe983e5fd2Affected 288ace2f57c9d06dd2e42bd80d03747d879a4068 to before cce18c263e9623872327ba3c956012f73c1179ccAffected
LinuxLinux	6.10Affected before 6.10Not affected 6.12.114 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.0.11 through 7.0.*Not affected 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.