CVE-2026-64068

Source
https://cve.org/CVERecord?id=CVE-2026-64068
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64068.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-64068
Downstream
BELL (1)
CGA (101)
DEBIAN (1)
openSUSE (1)
ROOT (1)
SUSE (4)
UBUNTU (1)
Related
Published
2026-07-19T15:39:45Z
Modified
2026-11-01T17:27:59Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
netfs: Fix missing locking around retry adding new subreqs
Details

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix missing locking around retry adding new subreqs

Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64068.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
288ace2f57c9d06dd2e42bd80d03747d879a4068
Fixed
f59c4ec86ef3a9ac99706ae163a38ec28129fd76
Fixed
d5c9d19b0ff2f7153532ac238a5e96fed2df315c
Fixed
393f3f0d7353a94b1e0bc4ca89c683fe983e5fd2
Fixed
cce18c263e9623872327ba3c956012f73c1179cc

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64068.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.10.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.50
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.11

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64068.json"