CVE-2026-64216

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A Use-After-Free (UAF) issue exists in the netfs component. The function netfs unlock abandoned read pages() accesses the index of folios to unlock and compares it to the no unlock folio variable in rreq to prevent unlocking folios being read for netfs perform write() or netfs write begin(). Because this function is called after NETFS RREQ IN PROGRESS is cleared, ownership of the folio specified by no unlock folio reverts to the caller, leading to a potential invalid dereference. A similar issue also affects the netfs unlock read folio() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.