CVE-2026-64216
A critical vulnerability in the Linux kernel’s netfs subsystem could allow an attacker to cause a use‑after‑free, potentially leading to arbitrary code execution. The flaw occurs when netfs_unlock_abandoned_read_pages() incorrectly accesses a folio that has already been freed. The issue has been fixed in the kernel by storing the folio pointer instead of its index.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel, any distribution using a kernel version before the fix. Typical users are system administrators and end‑users running Linux.
Real-world impact
An attacker could exploit the use‑after‑free to execute arbitrary code with kernel privileges, potentially taking full control of the affected system.
Why this severity
The CVSS score of 9.8 reflects the vulnerability’s high impact (confidentiality, integrity, availability) and the fact that it can be exploited remotely without authentication or user interaction.
What to do about it
- 01Upgrade the Linux kernel to a version that includes the netfs UAF fix.
NVD description indicates fix
Timeline
- Jul 24, 2026 · 8d agoPublishedDisclosed and added to the National Vulnerability Database.
- Jul 27, 2026 · 5d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.
- Jul 30, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.