CVE-2026-64061

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.0.0

Description A use-after-free issue exists in the netfs read gaps() function. The problem occurs because the sink page is released prematurely before the request completes. This sink page is used within an ITER BVEC-class iterator to fill gaps from the target folio, allowing a single read operation to address both gaps. A use-after-free (UAF) is a memory corruption error that occurs when a program continues to use a pointer after the memory it points to has been freed.

Recommendations Update the Linux kernel to a version where the netfs read gaps() function is fixed to release the sink page only after the request has completed.