CVE-2026-64160
- Source
- https://cve.org/CVERecord?id=CVE-2026-64160
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-64160.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-64160
- Downstream
- Published
- 2026-07-19T15:40:47.063Z
- Modified
- 2026-07-22T03:31:49.818998062Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- netfs: Fix potential for tearing in ->remote_i_size and ->zero_point
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
netfs: Fix potential for tearing in ->remoteisize and ->zero_point
Fix potential tearing in using ->remoteisize and ->zeropoint by copying isizeread() and isizewrite() and using the same seqcount as for isize.
We need to make sure that netfslib and the filesystems that use it always hold ilock whilst updating any of the sizes to prevent isize_seqcount from getting corrupted.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64160.json" }- References
-
- https://git.kernel.org/stable/c/2c8f4742bb76117d735f92a3932d85239b16c494
- https://git.kernel.org/stable/c/55970f238d495517edc961d55c44c772594d0969
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64160.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-64160
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git