CVE-2026-64112: In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lock_dwork draining on unm
infovulnerability
security
Summary
A race condition (TOCTOU, or time-of-check-time-of-use, where a value changes between being checked and used) exists in the Linux kernel's RBD (RADOS Block Device) driver in how it manages lock_dwork (a delayed work task for exclusive locking). The bug occurs during unmapping when lock_dwork can be re-queued after it should have been permanently canceled, potentially causing the lock acquisition function to run after memory has been freed, leading to crashes.
Vulnerability Details
EPSS (30-day exploit probability)
EPSS: 0.0%
Disclosure Date
July 19, 2026
Classification
Attack SophisticationModerate
Monthly digest — independent AI security research
Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-64112
First tracked: July 19, 2026 at 02:09 PM
Classified by LLM (prompt v3) · confidence: 95%