CVE-2026-64062

Source
https://cve.org/CVERecord?id=CVE-2026-64062
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64062.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64062
Downstream
Published
2026-07-19T15:39:41.523Z
Modified
2026-07-21T03:47:49.327708836Z
Summary
netfs: Fix potential deadlock in write-through mode
Details

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix potential deadlock in write-through mode

Fix netfsadvancewritethrough() to always unlock the supplied folio and to mark it dirty if it isn't yet written to the end. Unfortunately, it can't be marked for writeback until the folio is done with as that may cause a deadlock against mmapped reads and writes.

Even though it has been marked dirty, premature writeback can't occur as the caller is holding both inode->irwsem (which will prevent concurrent truncation, fallocation, DIO and other writes) and ictx->wblock (which will cause flushing to wait and writeback to skip or wait).

Note that this may be easier to deal with once the queuing of folios is split from the generation of subrequests.

Database specific
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64062.json",
    "cna_assigner": "Linux"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
288ace2f57c9d06dd2e42bd80d03747d879a4068
Fixed
1468f39243ccb155b6d97f9a9932f610d1205d75
Fixed
003aa0dd26c964025acd6d1213bcdbd674db2ca9
Fixed
e40e9cbf3ee4d30ee9a97bd128c85500b6ad0da1
Fixed
b6a4ae1634b3ad2aaa05222e53d36da532852faf

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64062.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.12.92
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.34
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.11

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64062.json"