Vulnerability in Linux
CVE-2026-64156
In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfs_write_single() and afs_single_writepages() to better handle a write that would be skipped due to lock contention and WB_SYNC_NONE by returning 1 from netfs_write_single() if it skipped and making afs_single_writepages() skip also. If a skip occurs, the inode must be re-marked as the VFS may have cleared the mark. This is really only theoretical for directories in netfs_write_single() as the only path to that is through afs_single_writepages() that takes the ->validate_lock around it, thereby serialising it.
EPSS: 0.001 (2.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.5 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H.
Affected products
- Linux — versions 6dd80936618c4ff852d4db73aca400351d9bd9f0, 6.14, 0
- Linux Linux_kernel — versions 7.1
References
Frequently asked questions
- What is CVE-2026-64156?
- CVE-2026-64156 is a medium-severity vulnerability in Linux. CVSS score: 5.5/10. Published 2026-07-19.
- How severe is CVE-2026-64156?
- Medium severity. CVSS v3 base score is 5.5 out of 10.