{
  "cveId": "CVE-2026-64065",
  "url": "https://patchblox.com/security/cve/CVE-2026-64065",
  "summary": "CVE-2026-64065 is fixed in 38 products on 1 platform, first by ALAS2023-2026-1894, released June 22, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "linux: In the Linux kernel, the following vulnerability has been resolved:  netfs: fix VM_BUG_ON_FOLIO() issue in netfs_writ...",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  netfs: fix VM_BUG_ON_FOLIO() issue in netfs_write_begin() call  The multiple runs of generic/013 test-case is capable to reproduce a kernel BUG at mm/filemap.c:1504 with probability of 30%.  while true; do   sudo ./check generic/013 done  [ 9849.452376] page: refcount:3 mapcount:0 mapping:00000000e58ff252 index:0x10781 pfn:0x1c322 [ 9849.452412] memcg:ffff8881a1915800 [ 9849.452417] aops:ceph_aops ino:1000058db9e dentry name(?):\u0022f9XXXXXX\u0022 [ 9849.452432] flags: 0x17ffffc0000000(node=0|zone=2|lastcpupid=0x1fffff) [ 9849.452441] raw: 0017ffffc0000000 0000000000000000 dead000000000122 ffff88816110d248 [ 9849.452445] raw: 0000000000010781 0000000000000000 00000003ffffffff ffff8881a1915800 [ 9849.452447] page dumped because: VM_BUG_ON_FOLIO(!folio_test_locked(folio)) [ 9849.452474] ------------[ cut here ]------------ [ 9849.452476] kernel BUG at mm/filemap.c:1504! [ 9849.478635] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 9849.481772] CPU: 2 UID: 0 PID: 84223 Comm: fsstress Not tainted 7.0.0-rc1\u002B #18 PREEMPT(full) [ 9849.482881] Hardware name: QEMU Standard PC (i440FX \u002B PIIX, 1996), BIOS 1.17.0-9.fc43 06/1 0/2025 [ 9849.484539] RIP: 0010:folio_unlock\u002B0x85/0xa0 [ 9849.485076] Code: 89 df 31 f6 e8 1c f3 ff ff 48 8b 5d f8 c9 31 c0 31 d2 31 f6 31 ff c3 cc cc cc cc 48 c7 c6 80 6c d9 a7 48 89 df e8 4b b3 10 00 \u003C0f\u003E 0b 48 89 df e8 21 e6 2c 00 eb 9d 0f 1f 40 00 66 66 2e 0f 1f 84 [ 9849.493818] RSP: 0018:ffff8881bb8076b0 EFLAGS: 00010246 [ 9849.495740] RAX: 0000000000000000 RBX: ffffea00070c8980 RCX: 0000000000000000 [ 9849.498678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 9849.500559] RBP: ffff8881bb8076b8 R08: 0000000000000000 R09: 0000000000000000 [ 9849.501097] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000010782000 [ 9849.502108] R13: ffff8881935de738 R14: ffff88816110d010 R15: 0000000000001000 [ 9849.502516] FS:  00007e36cbe94740(0000) GS:ffff88824a899000(0000) knlGS:0000000000000000 [ 9849.502996] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 9849.503810] CR2: 000000c0002b0000 CR3: 000000011bbf6004 CR4: 0000000000772ef0 [ 9849.504459] PKRU: 55555554 [ 9849.504626] Call Trace: [ 9849.505242]  \u003CTASK\u003E [ 9849.505379]  netfs_write_begin\u002B0x7c8/0x10a0 [ 9849.505877]  ? __kasan_check_read\u002B0x11/0x20 [ 9849.506384]  ? __pfx_netfs_write_begin\u002B0x10/0x10 [ 9849.507178]  ceph_write_begin\u002B0x8c/0x1c0 [ 9849.507934]  generic_perform_write\u002B0x391/0x8f0 [ 9849.508503]  ? __pfx_generic_perform_write\u002B0x10/0x10 [ 9849.509062]  ? file_update_time_flags\u002B0x19a/0x4b0 [ 9849.509581]  ? ceph_get_caps\u002B0x63/0xf0 [ 9849.510259]  ? ceph_get_caps\u002B0x63/0xf0 [ 9849.510530]  ceph_write_iter\u002B0xe79/0x1ae0 [ 9849.511282]  ? __pfx_ceph_write_iter\u002B0x10/0x10 [ 9849.511839]  ? lock_acquire\u002B0x1ad/0x310 [ 9849.512334]  ? ksys_write\u002B0xf9/0x230 [ 9849.512582]  ? lock_is_held_type\u002B0xaa/0x140 [ 9849.513128]  vfs_write\u002B0x512/0x1110 [ 9849.513634]  ? __fget_files\u002B0x33/0x350 [ 9849.513893]  ? __pfx_vfs_write\u002B0x10/0x10 [ 9849.514143]  ? mutex_lock_nested\u002B0x1b/0x30 [ 9849.514394]  ksys_write\u002B0xf9/0x230 [ 9849.514621]  ? __pfx_ksys_write\u002B0x10/0x10 [ 9849.514887]  ? do_syscall_64\u002B0x25e/0x1520 [ 9849.515122]  ? __kasan_check_read\u002B0x11/0x20 [ 9849.515366]  ? trace_hardirqs_on_prepare\u002B0x178/0x1c0 [ 9849.515655]  __x64_sys_write\u002B0x72/0xd0 [ 9849.515885]  ? trace_hardirqs_on\u002B0x24/0x1c0 [ 9849.516130]  x64_sys_call\u002B0x22f/0x2390 [ 9849.516341]  do_syscall_64\u002B0x12b/0x1520 [ 9849.516545]  ? do_syscall_64\u002B0x27c/0x1520 [ 9849.516783]  ? do_syscall_64\u002B0x27c/0x1520 [ 9849.517003]  ? lock_release\u002B0x318/0x480 [ 9849.517220]  ? __x64_sys_io_getevents\u002B0x143/0x2d0 [ 9849.517479]  ? percpu_ref_put_many.constprop.0\u002B0x8f/0x210 [ 9849.517779]  ? entry_SYSCALL_64_after_hwframe\u002B0x76/0x7e [ 9849.518073]  ? do_syscall_64\u002B0x25e/0x1520 [ 9849.518291]  ? __kasan_check_read\u002B0x11/0x20 [ 9849.518519]  ? trace_hardirqs_on_prepare\u002B0x178/0x1c0 [ 9849.518799]  ? do_syscall_64\u002B0x27c/0x1520 [ 9 ---truncated---",
  "published": "2026-06-22T09:00:00Z",
  "severity": "medium",
  "cvss": 5.5,
  "cvssVector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00162,
  "epssPercentile": 0.05382,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.12.92-122.166",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.18.35-68.127",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.94-1",
      "fix": "DEBIAN-CVE-2026-64065",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-64065",
      "released": "2026-07-20T12:58:36Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.0.12-1",
      "fix": "DEBIAN-CVE-2026-64065",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-64065",
      "released": "2026-07-20T12:58:36Z"
    },
    {
      "platform": "linux",
      "product": "microvm-kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.92-122.166.amzn2023",
      "fix": "ALAS2023-2026-1894",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1894",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.35-68.127.amzn2023",
      "fix": "ALAS2023-2026-1881",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-1881",
      "released": "2026-06-22T09:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T06:59:42Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}