Linux Kernel Directory Write Handling Vulnerability in AFS Component

CVE-2026-64156

What is CVE-2026-64156?

In the Linux kernel's AFS component, a vulnerability was identified that relates to improper handling of write operations within directories. Specifically, the netfs_write_single() and afs_single_writepages() functions failed to manage lock contention correctly, potentially leading to skipped writes. The update rectifies this issue by ensuring that if a write is skipped, the system appropriately returns a success indicator and re-marks the inode status, mitigating risks associated with write operations in directory contexts.

References