01 Record

CVE-2026-64164

btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file()

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.11% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 1.3% of scored records. A rank, not a probability.
NVD base score: 5.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
NVD analysis status: Analyzed. NVD last modified this record on 2026-08-13.
Red Hat severity: Low. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-07-19 15:40Z3 MO AGO

Last updated

2026-07-19 15:40Z3 MO AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-476NULL Pointer DereferenceBase
CWE-663Use of a Non-reentrant Function in a Concurrent ContextBase

Data version

5.2

Document digest

f8488692347a2a19de0ae4ba799ec975a2d431a29c81fb05f9867c2b4c0570f1

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux4a7bab35fad5251c8cb738161152578cd83b6b9c to < d78b0a80eac36879ef5478707135c446920e134b, 520e8b4bcf872a534a7bf61ccf880047642df296 to < 4361954f0e158af0530caa1e57f12b531be4658f, e252db8ca2a01f82d472091f35d549b313278636 to < 6279992c9ba2774901c9d4dd4a481162e2534714, c09a7446aab5773f38d6abb25fce99b8e1dfbc97 to < 26b2290baaf6da6add0f782a100766e686a33f4f, 32372781d664a9b03c40343e96c29d0a6139f97d to < 12a0487945c09760a5968d9333383014ea294117, 2e4adfaec97ee053ad1bdfb5036845e66f7e0d8a to < c32a7e0e3c73c1c0768556a56bd78de9f7b83780, a85b46db143fda5869e7d8df8f258ccef5fa1719 to < 0a96d9a85cd2240481297156b9bb72e10b7a8036, a85b46db143fda5869e7d8df8f258ccef5fa1719 to < c73370c677646e86fc4b1780fb07027bdf847375, d110d7cdb045715c0b45b0dfd974525bb38f653d, 6.6.136 to < 6.6.142, 6.12.83 to < 6.12.92, 6.18.24 to < 6.18.34, 6.19.14 to < 6.20, 7.0—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/d78b0a80eac36879ef5478707135c446920e134b
git.kernel.orghttps://git.kernel.org/stable/c/4361954f0e158af0530caa1e57f12b531be4658f
git.kernel.orghttps://git.kernel.org/stable/c/6279992c9ba2774901c9d4dd4a481162e2534714
git.kernel.orghttps://git.kernel.org/stable/c/26b2290baaf6da6add0f782a100766e686a33f4f
git.kernel.orghttps://git.kernel.org/stable/c/12a0487945c09760a5968d9333383014ea294117
git.kernel.orghttps://git.kernel.org/stable/c/c32a7e0e3c73c1c0768556a56bd78de9f7b83780
git.kernel.orghttps://git.kernel.org/stable/c/0a96d9a85cd2240481297156b9bb72e10b7a8036
git.kernel.orghttps://git.kernel.org/stable/c/c73370c677646e86fc4b1780fb07027bdf847375

07 Fixed in

Debian 13

linux
Fixed in 6.12.94-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.0.12-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.