{ "cveId": "CVE-2026-64596", "url": "https://patchblox.com/security/cve/CVE-2026-64596", "summary": "CVE-2026-64596 is fixed in 20 products on 1 platform, first by ALAS2023-2026-2045, released August 3, 2026. It is not reported as exploited. Patch Radar priority: High.", "title": "linux: In the Linux kernel, the following vulnerability has been resolved: libfs: set SB_I_NOEXEC and SB_I_NODEV by default...", "description": "In the Linux kernel, the following vulnerability has been resolved: libfs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() Since commit 1e7ab6f67824 (\u0022anon_inode: rework assertions\u0022), path_noexec() warns when an anonymous-inode file is mmap\u0027d from a superblock that has not set SB_I_NOEXEC. dma-buf backs its files this way and never set the flag, so mmap of any exported buffer trips the warning on a CONFIG_DEBUG_VFS=y kernel: WARNING: CPU: 11 PID: 121813 at fs/exec.c:118 path_noexec\u002B0x47/0x50 do_mmap\u002B0x2b5/0x680 vm_mmap_pgoff\u002B0x129/0x210 ksys_mmap_pgoff\u002B0x177/0x240 __x64_sys_mmap\u002B0x33/0x70 init_pseudo() sets up internal SB_NOUSER mounts that are never path-reachable. Set both flags here so every pseudo filesystem gets them by default instead of each caller setting them. SB_I_NODEV is inert for unreachable mounts. SB_I_NOEXEC has one visible effect: an executable mapping of a pseudo-fs fd, such as a dma-buf, now fails with -EPERM, which is the invariant the assertion enforces. No in-tree caller maps these executable. Reproduce on CONFIG_DEBUG_VFS=y: make -C tools/testing/selftests/dmabuf-heaps sudo ./tools/testing/selftests/dmabuf-heaps/dmabuf-heap -t system", "published": "2026-08-03T09:00:00Z", "severity": "important", "epss": 0.00206, "epssPercentile": 0.10765, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "bpftool6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "bpftool6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel-livepatch-6.18.39-79.141", "release": "amzn 2023", "fixedVersion": "1:1.0-0.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-aarch64", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-debuginfo-common-x86_64", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-headers", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-modules-extra-common", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "kernel6.18-tools-devel", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "linux", "release": "Debian 14", "fixedVersion": "7.1.4-1", "fix": "DEBIAN-CVE-2026-64596", "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-64596", "released": "2026-08-07T15:22:10Z" }, { "platform": "linux", "product": "microvm-kernel6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.18", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" }, { "platform": "linux", "product": "python3-perf6.18-debuginfo", "release": "amzn 2023", "fixedVersion": "1:6.18.39-79.141.amzn2023", "fix": "ALAS2023-2026-2045", "url": "https://patchblox.com/security/fix/linux/alas2023-2026-2045", "released": "2026-08-03T09:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }