Linux Kernel Vulnerability in NetFS Affecting Streaming Write Pages

CVE-2026-64157

What is CVE-2026-64157?

A vulnerability in the Linux kernel's netfs component can lead to improper handling of streaming write pages. Specifically, when there is a partial invalidation of a dirty write cached in a streaming write page, the function responsible for the invalidation incorrectly shifts the dirty region. Instead of correctly adjusting the dirty offset to the end of the invalidation region, it erroneously modifies it by setting the start to the beginning of the invalidation area. This flaw can lead to potential data corruption and unexpected behavior in applications relying on netfs for handling streaming writes.

References