Linux Kernel Vulnerability in Netfs Impacting File System Integrity

CVE-2026-64160

What is CVE-2026-64160?

A vulnerability in the Linux kernel related to the netfs component can lead to inconsistencies in file size management. This issue arises from improper handling of the ->remote_i_size and ->zero_point parameters, potentially allowing corrupted size information due to race conditions. The fix involves ensuring that the i_lock is consistently maintained while updating file sizes to secure the integrity of the i_size_seqcount, thereby preventing potential file system errors.

References