Review reviewCritical

CVE-2026-64061

Linux

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix early put of sink folio in netfs_read_gaps() Fix netfs_read_gaps() to release the sink page it uses after waiting for the request to complete. The way the sink page is used is that an ITER_BVEC-class iterator is created that has the gaps from the target folio at either end, but has the sink page tiled over the middle so that a single read op can fill in both gaps. The bug was found by KASAN detecting a UAF on the generic/075 xfstest in the cifsd kernel thread that handles reception of data from the TCP socket: BU...

CVSS: 9.8
EPSS: -
CISA KEV: Not listed
Published: 2026.07.20

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 9.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e < 2a39d49c8d97df8cb8fa80c10859bc1ba7358c6b, >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e < d4f4bc87c76511cf2532448b0fa40c25e894bd7d, >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e < 412e8bad48967fd34295866636c028befd27d8b9, >= ee4cdf7ba857a894ad1650d6ab77669cbbfa329e < 3e5dd91b87a8b1450217b56a336bee315f40da7d, >= 6.12
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE: Not available