CVE Explorer

CVE-2026-64185

In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfs_update_group() is called for a named group and create_files() fails (e.g. -ENOMEM), internal_create_group() calls kernfs_remove(kn) on the group directory. In the update path, kn was obtained via kernfs_find_and_get() and refers to a directory that already existed before this call. Removing it silently destroys a sysfs group that the caller did not create.

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:1bfe03a9f685d95b99231749dbc47f749ed8113d169b0a375a659b25eb350665

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/sysfs/group.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"c5e125c828b701afaf7493b42a14aa89362ff36d","status":"affected","version":"c855cf2759d27142f771173d9fd8e7fdf9cf5138","versionType":"git"},{"lessThan":"ccadd32cc1263802a5969c9efe0e96225450428c","status":"affected","version":"c855cf2759d27142f771173d9fd8e7fdf9cf5138","versionType":"git"},{"lessThan":"14f2c14ae86c4af17a0a9f8ab46dacf2d5fd1d8a","status":"affected","version":"c855cf2759d27142f771173d9fd8e…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/sysfs/group.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"4.19"},{"lessThan":"4.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.258","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEq…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/affected/1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/14f2c14ae86c4af17a0a9f8ab46dacf2d5fd1d8a"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/237557b8a81ab948e8332f7c0058e758f081c0a3"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/31527d80234caf83dc96ad478645e57df9de4472"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/48fa96538bd2868034d33429e4565fda384d0736"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/57b285e0368290aa55f79ba11419b96d0ebdb418"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/708f6926f61f71e09b5e9fd668b9882ccd46e69f"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/c5e125c828b701afaf7493b42a14aa89362ff36d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/ccadd32cc1263802a5969c9efe0e96225450428c"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:2493c09a2413c6f2c24e600cea20fed4d590dce90e837836eb6b8edc8d944198 · sha256:3d993c3182054cac… · /containers/cna/references/1

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer