SEPTEMBER 7, 2026
Live Feed
Back to database
Case File

CVE-2026-64160

CRITICAL · CVSS 9.8 EPSS 0.41%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's netfs component, specifically related to the handling of file size metadata, which could lead to data corruption due to improper synchronization. This critical flaw, with a CVSS score of 9.8, poses a significant risk of data integrity issues for systems utilizing netfslib and associated filesystems. Organizations running Linux environments, particularly those relying on network file systems, should prioritize applying the necessary patches to mitigate this risk.

CVE
CVE-2026-64160
Severity
CRITICAL
CVSS
9.8
EPSS
0.41%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential for tearing in ->remote_i_size and ->zero_point Fix potential tearing in using ->remote_i_size and ->zero_point by copying i_size_read() and i_size_write() and using the same seqcount as for i_size. We need to make sure that netfslib and the filesystems that use it always hold i_lock whilst updating any of the sizes to prevent i_size_seqcount from getting corrupted.

Related CVEs

Other vulnerabilities affecting the same vendor(s)