CVE-2026-64067
A flaw in the Linux kernel's netfs component allows for improper synchronization when accessing subrequests. This occurs because certain data is accessed without proper memory barriers, meaning the system might see data in an incorrect or inconsistent state.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Users running versions of the Linux kernel containing the netfs component that lack the specific memory barrier fixes.
Real-world impact
An attacker could potentially exploit this race condition to cause system instability or unexpected behavior within the kernel's networking subsystem.
Why this severity
The critical score reflects that this is a network-accessible vulnerability that can be exploited without user interaction or special privileges, potentially impacting the confidentiality, integrity, and availability of the system.
What to do about it
- 01Apply the Linux kernel fix that implements list_add_tail_release() and list_first_entry_or_null_acquire() to ensure proper memory barriers during subrequest access.
NVD-referenced vendor advisory
Timeline
- Jul 19, 2026 · 14d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 20, 2026 · 13d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
- Jul 30, 2026 · 3d agoAdvisory updatedThe NVD record was last revised.