PT-2026-61376 · Linux · Linux

CVE-2026-64059 · Publicado 2026-07-19 · Atualizado 2026-07-19

NVD

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix folio->private handling in netfs perform write()

Under some circumstances, netfs perform write() doesn't correctly manipulate folio->private between NULL, NETFS FOLIO COPY TO CACHE, pointing to a group and pointing to a netfs folio struct, leading to potential multiple attachments of private data with associated folio ref leaks and also leaks of netfs folio structs or netfs group refs.

Fix this by consolidating the place at which a folio is marked uptodate in one place and having that look at what's attached to folio->private and decide how to clean it up and then set the new group. Also, the content shouldn't be flushed if group is NULL, even if a group is specified in the netfs group parameter, as that would be the case for a new folio. A filesystem should always specify netfs group or never specify netfs group.

The Sashiko auto-review tool noted that it was theoretically possible that the fpos >= ctx->zero point section might leak if it modified a streaming write folio. This is unlikely, but with a network filesystem, third party changes can happen. It also pointed out that netfs set group() would leak if called multiple times on the same folio from the "whole folio modify section".

Identificadores relacionados

CVE-2026-64059

Produtos afetados

Linux

Referências · 5

• https://git.kernel.org/stable/c/7f040243c74d72b45b22246c7d9e621fbeab44ac · Nota
• https://git.kernel.org/stable/c/ccde2ac757c713535b224233a296de40efe5212d · Nota
• https://git.kernel.org/stable/c/0969ea8370bad0e4fb6131b6a7bed9e7ec522ac7 · Nota
• https://git.kernel.org/stable/c/551b5c71ee312ca7646ddb605231c1016e8cbb18 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-64059 · Nota de Segurança