SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64068

CRITICAL · CVSS 9.8 EPSS 0.38%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A critical vulnerability in the Linux kernel affects the netfs component, where inadequate locking during the addition of new subrequests can lead to potential data corruption or denial of service. This flaw poses a significant risk to systems relying on the Linux kernel for network file system operations. Organizations using affected Linux distributions should prioritize patching to mitigate the risk of exploitation.

CVE
CVE-2026-64068
Severity
CRITICAL
CVSS
9.8
EPSS
0.38%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.