SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64157

MEDIUM · CVSS 5.5 EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's netfs component, specifically in the handling of partial invalidations during streaming writes. An incorrect modification of the dirty region can lead to data corruption or loss, as it improperly adjusts the dirty offset. Organizations using Linux systems with netfs should prioritize this fix to ensure data integrity and prevent potential disruptions in streaming write operations.

CVE
CVE-2026-64157
Severity
MEDIUM
CVSS
5.5
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix partial invalidation of streaming-write folio In netfs_invalidate_folio(), if the region of a partial invalidation overlaps the front (but not all) of a dirty write cached in a streaming write page (dirty, but not uptodate, with the dirty region tracked by a netfs_folio struct), the function modifies the dirty region - but incorrectly as it moves the region forward by setting the start to the start, not the end, of the invalidation region. Fix this by setting finfo->dirty_offset to the end of the invalidation region (iend).

Related CVEs

Other vulnerabilities affecting the same vendor(s)