CVE-2026-64185

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
19/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> sysfs: don&amp;#39;t remove existing directory on update failure<br /> <br /> When sysfs_update_group() is called for a named group and create_files()<br /> fails (e.g. -ENOMEM), internal_create_group() calls kernfs_remove(kn) on<br /> the group directory. In the update path, kn was obtained via<br /> kernfs_find_and_get() and refers to a directory that already existed<br /> before this call. Removing it silently destroys a sysfs group that the<br /> caller did not create.<br /> <br /> Only remove the directory if we created it ourselves. On update failure<br /> the directory remains as it is left empty by remove_files() inside<br /> create_files(), but can be repopulated by a retry.

Impact