PT-2026-61502 · Linux · Linux Kernel

CVE-2026-64185 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the sysfs component where the sysfs update group() function may incorrectly remove an existing directory during an update failure. When create files() fails (for example, due to -ENOMEM), the internal create group() function calls kernfs remove(kn) on the group directory. Because the directory was obtained via kernfs find and get() and already existed, this action silently destroys a sysfs group that the caller did not create.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64185

Affected Products

Linux Kernel

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2026-64185 · Security Note
• https://git.kernel.org/stable/c/14f2c14ae86c4af17a0a9f8ab46dacf2d5fd1d8a · Note
• https://git.kernel.org/stable/c/48fa96538bd2868034d33429e4565fda384d0736 · Note
• https://git.kernel.org/stable/c/237557b8a81ab948e8332f7c0058e758f081c0a3 · Note
• https://twitter.com/CVEnew/status/2078951942642958798 · Twitter Post
• https://git.kernel.org/stable/c/57b285e0368290aa55f79ba11419b96d0ebdb418 · Note
• https://git.kernel.org/stable/c/c5e125c828b701afaf7493b42a14aa89362ff36d · Note
• https://twitter.com/infoflowcloud/status/2078953203790500242 · Twitter Post
• https://git.kernel.org/stable/c/31527d80234caf83dc96ad478645e57df9de4472 · Note
• https://git.kernel.org/stable/c/708f6926f61f71e09b5e9fd668b9882ccd46e69f · Note
• https://git.kernel.org/stable/c/ccadd32cc1263802a5969c9efe0e96225450428c · Note