CVE-2026-64068
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk31th percentile - higher than 31% of all known CVEs
Summary
In the Linux kernel, missing locking was found when adding new subrequests in retry functions for read and write operations in the netfs filesystem. This vulnerability could lead to data races and system instability.
Risk Assessment
The organization is at risk of filesystem corruption, data loss, or unpredictable kernel behavior during network filesystem I/O operations.
Recommendation
Immediately update the Linux kernel to a version containing the fix that addresses the missing locking in netfs_retry_read_subrequests() and netfs_retry_write_stream().
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.