---
id: CVE-2026-64160
title: 'netfs: Fix potential for tearing in ->remote_i_size and ->zero_point'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

  Fix potential tearing in using ->remote_i_size and ->zero_point by copying
  i_size_read() and i_siz…
severity: critical
cvss: 9.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 4058f742105ecfcbdf99e1139e6c1f74fb8e6db9 <
    55970f238d495517edc961d55c44c772594d0969
  - >-
    Linux >= 4058f742105ecfcbdf99e1139e6c1f74fb8e6db9 <
    2c8f4742bb76117d735f92a3932d85239b16c494
  - Linux 5.18
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: total
  timestamp: '2026-10-16T15:37:03.470970Z'
published: '2026-07-19'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T15:42:24.995Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-64160'
references:
  - url: 'https://git.kernel.org/stable/c/55970f238d495517edc961d55c44c772594d0969'
  - url: 'https://git.kernel.org/stable/c/2c8f4742bb76117d735f92a3932d85239b16c494'
tags:
  - cve.org
epss: 0.00553
epssPercentile: 0.45002
ingestedAt: '2026-10-16T17:24:46.808Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

netfs: Fix potential for tearing in ->remote_i_size and ->zero_point

Fix potential tearing in using ->remote_i_size and ->zero_point by copying
i_size_read() and i_size_write() and using the same seqcount as for i_size.

We need to make sure that netfslib and the filesystems that use it always
hold i_lock whilst updating any of the sizes to prevent i_size_seqcount
from getting corrupted.

## Affected

- `Linux >= 4058f742105ecfcbdf99e1139e6c1f74fb8e6db9 < 55970f238d495517edc961d55c44c772594d0969`
- `Linux >= 4058f742105ecfcbdf99e1139e6c1f74fb8e6db9 < 2c8f4742bb76117d735f92a3932d85239b16c494`
- `Linux 5.18`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.