Memory Access Vulnerability in Linux Kernel Netfs Management

CVE-2026-64216

What is CVE-2026-64216?

A vulnerability in the Linux kernel's netfs subsystem could allow the unauthorized access of memory through the improper handling of folios. Specifically, the function netfs_unlock_abandoned_read_pages(rreq) mistakenly accesses an index after critical state changes, leading to potential use-after-free conditions. This was addressed by altering the code to use a folio pointer instead of an index, ensuring safer memory operations and mitigating risks of unauthorized memory interactions during read and write operations.

References