{"id":"CVE-2026-64157","summary":"netfs: Fix partial invalidation of streaming-write folio","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnetfs: Fix partial invalidation of streaming-write folio\n\nIn netfs_invalidate_folio(), if the region of a partial invalidation\noverlaps the front (but not all) of a dirty write cached in a streaming\nwrite page (dirty, but not uptodate, with the dirty region tracked by a\nnetfs_folio struct), the function modifies the dirty region - but\nincorrectly as it moves the region forward by setting the start to the\nstart, not the end, of the invalidation region.\n\nFix this by setting finfo-\u003edirty_offset to the end of the invalidation\nregion (iend).","modified":"2026-10-28T02:30:43.302423570Z","published":"2026-07-19T15:40:44.964Z","related":["SUSE-SU-2026:23066-1","SUSE-SU-2026:23068-1","SUSE-SU-2026:23221-1","SUSE-SU-2026:23231-1","SUSE-SU-2026:23237-1","openSUSE-SU-2026:21555-1"],"database_specific":{"cna_assigner":"Linux","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64157.json"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/3d9601c029b934b5b6a10f99791467b10eb6b211"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6a3d27116be2c5fb9a03d5cf37c486ac517f3689"},{"type":"WEB","url":"https://git.kernel.org/stable/c/6d91acc7fb85d33ea58fca9b964a32a453937f4b"},{"type":"WEB","url":"https://git.kernel.org/stable/c/f6b2569ae29b666fd15ff2848684c445ba442a39"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/64xxx/CVE-2026-64157.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64157"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"cce6bfa6ca0e30af9927b0074c97fe6a92f28092"},{"fixed":"f6b2569ae29b666fd15ff2848684c445ba442a39"},{"fixed":"3d9601c029b934b5b6a10f99791467b10eb6b211"},{"fixed":"6a3d27116be2c5fb9a03d5cf37c486ac517f3689"},{"fixed":"6d91acc7fb85d33ea58fca9b964a32a453937f4b"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"6.10.8"},{"fixed":"6.11"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"e2814004138a541110d4b2dc254a8f619c2c4ce0"}]}],"versions":["v6.10.14","v6.10.13","v6.10.12","v6.10.11","v6.10.10","v6.10.9","v6.10.8"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64157.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.11.0"},{"fixed":"6.12.92"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.34"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.0.11"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-64157.json"}}],"schema_version":"1.9.2"}