{"id":"CVE-2026-64185","title":"sysfs: don't remove existing directory on update failure","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nsysfs: don't remove existing directory on update failure\n\nWhen sysfs_update_group() is called for a named group and create_files()\nfails (e.g. -ENOMEM), internal_create…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < c5e125c828b701afaf7493b42a14aa89362ff36d","Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < ccadd32cc1263802a5969c9efe0e96225450428c","Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 14f2c14ae86c4af17a0a9f8ab46dacf2d5fd1d8a","Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 31527d80234caf83dc96ad478645e57df9de4472","Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 57b285e0368290aa55f79ba11419b96d0ebdb418","Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 48fa96538bd2868034d33429e4565fda384d0736","Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 708f6926f61f71e09b5e9fd668b9882ccd46e69f","Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 237557b8a81ab948e8332f7c0058e758f081c0a3","Linux 4.19"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:31:44.287179Z"},"published":"2026-07-19","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:34:28.927Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-64185","references":[{"url":"https://git.kernel.org/stable/c/c5e125c828b701afaf7493b42a14aa89362ff36d"},{"url":"https://git.kernel.org/stable/c/ccadd32cc1263802a5969c9efe0e96225450428c"},{"url":"https://git.kernel.org/stable/c/14f2c14ae86c4af17a0a9f8ab46dacf2d5fd1d8a"},{"url":"https://git.kernel.org/stable/c/31527d80234caf83dc96ad478645e57df9de4472"},{"url":"https://git.kernel.org/stable/c/57b285e0368290aa55f79ba11419b96d0ebdb418"},{"url":"https://git.kernel.org/stable/c/48fa96538bd2868034d33429e4565fda384d0736"},{"url":"https://git.kernel.org/stable/c/708f6926f61f71e09b5e9fd668b9882ccd46e69f"},{"url":"https://git.kernel.org/stable/c/237557b8a81ab948e8332f7c0058e758f081c0a3"}],"tags":["cve.org"],"epss":0.00117,"epssPercentile":0.0165,"ingestedAt":"2026-11-06T16:57:43.223Z","slug":"CVE-2026-64185","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nsysfs: don't remove existing directory on update failure\n\nWhen sysfs_update_group() is called for a named group and create_files()\nfails (e.g. -ENOMEM), internal_create_group() calls kernfs_remove(kn) on\nthe group directory.  In the update path, kn was obtained via\nkernfs_find_and_get() and refers to a directory that already existed\nbefore this call.  Removing it silently destroys a sysfs group that the\ncaller did not create.\n\nOnly remove the directory if we created it ourselves.  On update failure\nthe directory remains as it is left empty by remove_files() inside\ncreate_files(), but can be repopulated by a retry.\n\n## Affected\n\n- `Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < c5e125c828b701afaf7493b42a14aa89362ff36d`\n- `Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < ccadd32cc1263802a5969c9efe0e96225450428c`\n- `Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 14f2c14ae86c4af17a0a9f8ab46dacf2d5fd1d8a`\n- `Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 31527d80234caf83dc96ad478645e57df9de4472`\n- `Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 57b285e0368290aa55f79ba11419b96d0ebdb418`\n- `Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 48fa96538bd2868034d33429e4565fda384d0736`\n- `Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 708f6926f61f71e09b5e9fd668b9882ccd46e69f`\n- `Linux >= c855cf2759d27142f771173d9fd8e7fdf9cf5138 < 237557b8a81ab948e8332f7c0058e758f081c0a3`\n- `Linux 4.19`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}