Bug 2502499 (CVE-2026-64040) - CVE-2026-64040 kernel: cachefiles: Fix error return when vfs_mkdir() fails
Summary: CVE-2026-64040 kernel: cachefiles: Fix error return when vfs_mkdir() fails
Keywords:
Status: NEW
Alias: CVE-2026-64040
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2026-07-19 17:02 UTC by OSIDB Bzimport
Modified: 2026-07-21 06:36 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)

Description OSIDB Bzimport 2026-07-19 17:02:43 UTC 
In the Linux kernel, the following vulnerability has been resolved:

cachefiles: Fix error return when vfs_mkdir() fails

When vfs_mkdir() fails, the error code is not extracted from the
returned error pointer. This causes mkdir_error to be reached with
ret=0, which leads to returning ERR_PTR(0) (NULL) instead of a
proper error pointer.

Fix this by extracting the error code from the error pointer when
vfs_mkdir() fails.
Comment 1 TEJ RATHI 2026-07-21 06:27:41 UTC 
Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026071906-CVE-2026-64040-6908@gregkh/T
Note You need to log in before you can comment on or make changes to this bug.