CVE-2026-64068: Linux Kernel

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix missing locking around retry adding new subreqs Fix netfs_retry_read_subrequests() and netfs_retry_write_stream() to take the appropriate lock when adding extra subrequests into stream->subrequests.

Affected products

• Linux Linux Kernel: from 6.10, before 7.0.11 (fixed in 7.0.11); version 7.1 only

Published 2026-07-19. Last modified 2026-09-07.