Linux Kernel Vulnerability in Netfs Affecting Data Integrity

CVE-2026-64159

What is CVE-2026-64159?

A vulnerability in the Linux kernel's netfs component affects how file positions are managed. Specifically, it concerns the update of the zero point during operations with uncommitted data in the pagecache. If the local file size (i_size) exceeds the size on the remote server (remote_i_size), it can lead to discrepancies in data retrieval, resulting in potential short reads. This flaw was identified through specific test conditions, indicating that the update mechanism for zero points needs to align more closely with remote file status to ensure reliable data integrity and reduce unnecessary read operations.

References