Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-64059

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio->private handling in netfs_perform_write() Under some circumstances, netfs_perform_write() doesn't correctly manipulate folio->private between NULL, NETFS_FOLIO_COPY_TO_CACHE, pointing to a group and pointing to a netfs_folio struct, leading to potential multiple attachments of private data with associated folio ref leaks and also leaks of netfs_folio structs or netfs_group refs. Fix this by consolidating the
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:0053ab2088908b2a6daf6e4f3d649abd4936946c86bd146c136c27e517d6d4fc
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/netfs/buffered_write.c","include/trace/events/netfs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.12"},{"lessThan":"6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.92","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.34","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.11","…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d476330c92cb01fa4dc21c7f58b325d3e92bae354fe9e30ad433435c858c3cee · sha256:754508e7563c3b53… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/netfs/buffered_write.c","include/trace/events/netfs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7f040243c74d72b45b22246c7d9e621fbeab44ac","status":"affected","version":"8f52de0077ba3bf41e5d53d67a185700f41efce7","versionType":"git"},{"lessThan":"551b5c71ee312ca7646ddb605231c1016e8cbb18","status":"affected","version":"8f52de0077ba3bf41e5d53d67a185700f41efce7","versionType":"git"},{"lessThan":"0969ea8370bad0e4fb6131b6a7bed9e7ec522ac7","status":"affected",…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d476330c92cb01fa4dc21c7f58b325d3e92bae354fe9e30ad433435c858c3cee · sha256:754508e7563c3b53… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["fs/netfs/buffered_write.c","include/trace/events/netfs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.12"},{"lessThan":"6.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.92","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.34","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.11","…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d476330c92cb01fa4dc21c7f58b325d3e92bae354fe9e30ad433435c858c3cee · sha256:754508e7563c3b53… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/netfs/buffered_write.c","include/trace/events/netfs.h"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7f040243c74d72b45b22246c7d9e621fbeab44ac","status":"affected","version":"8f52de0077ba3bf41e5d53d67a185700f41efce7","versionType":"git"},{"lessThan":"551b5c71ee312ca7646ddb605231c1016e8cbb18","status":"affected","version":"8f52de0077ba3bf41e5d53d67a185700f41efce7","versionType":"git"},{"lessThan":"0969ea8370bad0e4fb6131b6a7bed9e7ec522ac7","status":"affected",…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d476330c92cb01fa4dc21c7f58b325d3e92bae354fe9e30ad433435c858c3cee · sha256:754508e7563c3b53… · /containers/cna/affected/0

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/0969ea8370bad0e4fb6131b6a7bed9e7ec522ac7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d476330c92cb01fa4dc21c7f58b325d3e92bae354fe9e30ad433435c858c3cee · sha256:754508e7563c3b53… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/551b5c71ee312ca7646ddb605231c1016e8cbb18"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d476330c92cb01fa4dc21c7f58b325d3e92bae354fe9e30ad433435c858c3cee · sha256:754508e7563c3b53… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/7f040243c74d72b45b22246c7d9e621fbeab44ac"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d476330c92cb01fa4dc21c7f58b325d3e92bae354fe9e30ad433435c858c3cee · sha256:754508e7563c3b53… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/ccde2ac757c713535b224233a296de40efe5212d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d476330c92cb01fa4dc21c7f58b325d3e92bae354fe9e30ad433435c858c3cee · sha256:754508e7563c3b53… · /containers/cna/references/3

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer