Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2026-64065— netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

Quick assessment

Affected

Linux Linux

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于netfs_write_begin()函数中的folio锁定问题，可能导致内核崩溃。

AI Predicted 5.5 Difficulty: Moderate EPSS 0.17% · P6 Updated Jul 20, 2026

Possible ATT&CK Techniques 1 AI

T1499 · Endpoint Denial of Service

Affected Version Matrix 10

Vendor	Product	Version Range	Status
Linux	Linux	`ee4cdf7ba857a894ad1650d6ab77669cbbfa329e< 51ffb788f074c0a61953086f49008028c1e7b645`	affected
		`ee4cdf7ba857a894ad1650d6ab77669cbbfa329e< b63971238beb79cf701dac33c6cefc56c07c89fa`	affected
		`ee4cdf7ba857a894ad1650d6ab77669cbbfa329e< 5ad05b6f5df296ef046589f222bb2587495b991e`	affected
		`ee4cdf7ba857a894ad1650d6ab77669cbbfa329e< dc7832d05deb4d632e8035e3299e31a3528fa0d0`	affected
		`6.12`	affected
		`< 6.12`	unaffected
		`6.12.92≤ 6.12.*`	unaffected
		`6.18.34≤ 6.18.*`	unaffected
… +2 more rows

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-64065

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

Source: CVE Program / CVE List V5

Vulnerability Description

In the Linux kernel, the following vulnerability has been resolved: netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%. while true; do sudo ./check generic/013 done [ 9849.452376] page: refcount:3 mapcount:0 mapping:00000000e58ff252 index:0x10781 pfn:0x1c322 [ 9849.452412] memcg:ffff8881a1915800 [ 9849.452417] aops:ceph_aops ino:1000058db9e dentry name(?):"f9XXXXXX" [ 9849.452432] flags: 0x17ffffc0000000(node=0|zone=2|lastcpupid=0x1fffff) [ 9849.452441] raw: 0017ffffc0000000 0000000000000000 dead000000000122 ffff88816110d248 [ 9849.452445] raw: 0000000000010781 0000000000000000 00000003ffffffff ffff8881a1915800 [ 9849.452447] page dumped because: VM_BUG_ON_FOLIO(!folio_test_locked(folio)) [ 9849.452474] ------------[ cut here ]------------ [ 9849.452476] kernel BUG at mm/filemap.c:1504! [ 9849.478635] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 9849.481772] CPU: 2 UID: 0 PID: 84223 Comm: fsstress Not tainted 7.0.0-rc1+ #18 PREEMPT(full) [ 9849.482881] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.17.0-9.fc43 06/1 0/2025 [ 9849.484539] RIP: 0010:folio_unlock+0x85/0xa0 [ 9849.485076] Code: 89 df 31 f6 e8 1c f3 ff ff 48 8b 5d f8 c9 31 c0 31 d2 31 f6 31 ff c3 cc cc cc cc 48 c7 c6 80 6c d9 a7 48 89 df e8 4b b3 10 00 <0f> 0b 48 89 df e8 21 e6 2c 00 eb 9d 0f 1f 40 00 66 66 2e 0f 1f 84 [ 9849.493818] RSP: 0018:ffff8881bb8076b0 EFLAGS: 00010246 [ 9849.495740] RAX: 0000000000000000 RBX: ffffea00070c8980 RCX: 0000000000000000 [ 9849.498678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 9849.500559] RBP: ffff8881bb8076b8 R08: 0000000000000000 R09: 0000000000000000 [ 9849.501097] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000010782000 [ 9849.502108] R13: ffff8881935de738 R14: ffff88816110d010 R15: 0000000000001000 [ 9849.502516] FS: 00007e36cbe94740(0000) GS:ffff88824a899000(0000) knlGS:0000000000000000 [ 9849.502996] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 9849.503810] CR2: 000000c0002b0000 CR3: 000000011bbf6004 CR4: 0000000000772ef0 [ 9849.504459] PKRU: 55555554 [ 9849.504626] Call Trace: [ 9849.505242] <TASK> [ 9849.505379] netfs_write_begin+0x7c8/0x10a0 [ 9849.505877] ? __kasan_check_read+0x11/0x20 [ 9849.506384] ? __pfx_netfs_write_begin+0x10/0x10 [ 9849.507178] ceph_write_begin+0x8c/0x1c0 [ 9849.507934] generic_perform_write+0x391/0x8f0 [ 9849.508503] ? __pfx_generic_perform_write+0x10/0x10 [ 9849.509062] ? file_update_time_flags+0x19a/0x4b0 [ 9849.509581] ? ceph_get_caps+0x63/0xf0 [ 9849.510259] ? ceph_get_caps+0x63/0xf0 [ 9849.510530] ceph_write_iter+0xe79/0x1ae0 [ 9849.511282] ? __pfx_ceph_write_iter+0x10/0x10 [ 9849.511839] ? lock_acquire+0x1ad/0x310 [ 9849.512334] ? ksys_write+0xf9/0x230 [ 9849.512582] ? lock_is_held_type+0xaa/0x140 [ 9849.513128] vfs_write+0x512/0x1110 [ 9849.513634] ? __fget_files+0x33/0x350 [ 9849.513893] ? __pfx_vfs_write+0x10/0x10 [ 9849.514143] ? mutex_lock_nested+0x1b/0x30 [ 9849.514394] ksys_write+0xf9/0x230 [ 9849.514621] ? __pfx_ksys_write+0x10/0x10 [ 9849.514887] ? do_syscall_64+0x25e/0x1520 [ 9849.515122] ? __kasan_check_read+0x11/0x20 [ 9849.515366] ? trace_hardirqs_on_prepare+0x178/0x1c0 [ 9849.515655] __x64_sys_write+0x72/0xd0 [ 9849.515885] ? trace_hardirqs_on+0x24/0x1c0 [ 9849.516130] x64_sys_call+0x22f/0x2390 [ 9849.516341] do_syscall_64+0x12b/0x1520 [ 9849.516545] ? do_syscall_64+0x27c/0x1520 [ 9849.516783] ? do_syscall_64+0x27c/0x1520 [ 9849.517003] ? lock_release+0x318/0x480 [ 9849.517220] ? __x64_sys_io_getevents+0x143/0x2d0 [ 9849.517479] ? percpu_ref_put_many.constprop.0+0x8f/0x210 [ 9849.517779] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 9849.518073] ? do_syscall_64+0x25e/0x1520 [ 9849.518291] ? __kasan_check_read+0x11/0x20 [ 9849.518519] ? trace_hardirqs_on_prepare+0x178/0x1c0 [ 9849.518799] ? do_syscall_64+0x27c/0x1520 [ 9 ---truncated---

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Linux kernel 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Linux kernel是美国Linux基金会开源的一款操作系统内核。 Linux kernel存在安全漏洞，该漏洞源于netfs_write_begin()函数中的folio锁定问题，可能导致内核崩溃。

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Linux	Linux	ee4cdf7ba857a894ad1650d6ab77669cbbfa329e ~ 51ffb788f074c0a61953086f49008028c1e7b645	-
Linux	Linux	6.12	-

II. Public POCs for CVE-2026-64065

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2026-64065

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-64065 (2)

https://www.cve.org/CVERecord?id=CVE-2026-64065

Same Patch Batch · Linux · 2026-07-19 · 429 CVEs total

CVE-2026-63795	10.0 CRITICAL	9p: avoid putting oldfid in p9_client_walk() error path
CVE-2026-63887	9.8 CRITICAL	scsi: target: iscsi: Bound iscsi_encode_text_output() appends to rsp_buf
CVE-2026-63994	9.8 CRITICAL	tunnels: load network headers after skb_cow() in iptunnel_pmtud_build_icmp[v6]()
CVE-2026-64035	9.8 CRITICAL	igc: set tx buffer type for SMD frames
CVE-2026-64142	9.8 CRITICAL	ksmbd: close durable scavenger races against m_fp_list lookups
CVE-2026-63993	9.8 CRITICAL	vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()
CVE-2026-53399	9.8 CRITICAL	nfsd: release layout stid on setlease failure
CVE-2026-53398	9.8 CRITICAL	NFSD: Fix SECINFO_NO_NAME decode error cleanup
CVE-2026-63825	9.8 CRITICAL	gcov: use atomic counter updates to fix concurrent access crashes
CVE-2026-64025	9.8 CRITICAL	bpf, skmsg: fix verdict sk_data_ready racing with ktls rx
CVE-2026-64033	9.8 CRITICAL	RDMA/rtrs: Fix use-after-free in path file creation cleanup
CVE-2026-63886	9.8 CRITICAL	scsi: target: iscsi: Validate CHAP_R length before base64 decode
CVE-2026-64125	9.8 CRITICAL	net: bcmgenet: keep RBUF EEE/PM disabled
CVE-2026-64091	9.8 CRITICAL	batman-adv: tt: fix TOCTOU race for reported vlans
CVE-2026-63808	9.8 CRITICAL	exfat: fix potential use-after-free in exfat_find_dir_entry()
CVE-2026-63978	9.8 CRITICAL	net/handshake: Drain pending requests at net namespace exit
CVE-2026-63979	9.8 CRITICAL	net/handshake: hand off the pinned file reference to accept_doit
CVE-2026-64132	9.8 CRITICAL	ipv6: ioam: refresh hdr pointer before ioam6_event()
CVE-2026-64136	9.8 CRITICAL	smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked()
CVE-2026-63800	9.8 CRITICAL	pNFS: Fix use-after-free in pnfs_update_layout()

Showing top 20 of 429 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Linux

Same vendor: Linux

V. Comments for CVE-2026-64065

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-64065— netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call

Quick assessment

Possible ATT&CK Techniques 1 AI

Affected Version Matrix 10

I. Basic Information for CVE-2026-64065

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2026-64065

III. Intelligence Information for CVE-2026-64065

Patches & Fixes for CVE-2026-64065 (2)

Same Patch Batch · Linux · 2026-07-19 · 429 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2026-64065

Leave a comment