Reference page — cumulative record through Thursday, October 8, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV L L L N U N N H 5.5 .0014 3.1 —
AFFECTED Product Versions Fixed Linux 406fad7698f5bf21ab6b5ca195bf4b9e0b3990ed – — Linux 6.15 – 7.0.11
TIMELINE Jul 19 Reserved by Linux Jul 19 Published (CNA: Linux) Oct 6 ENRICHED — CVE-2026-64040 (Linux). Received CVSS 5.5 and CPE data from NVD.
In the Linux kernel, the following vulnerability has been resolved: cachefiles: Fix error return when vfs_mkdir() fails When vfs_mkdir() fails, the error code is not extracted from the returned error pointer. This causes mkdir_error to be reached with ret=0, which leads to returning ERR_PTR(0) (NULL) instead of a proper error pointer. Fix this by extracting the error code from the error pointer when vfs_mkdir() fails.
| Date | Event | Detail |
|---|---|---|
| July 19, 2026 | Reserved | Reserved by Linux |
| July 19, 2026 | Published | Published (CNA: Linux) |
| October 6, 2026 | ENRICHED | ENRICHED — CVE-2026-64040 (Linux). Received CVSS 5.5 and CPE data from NVD. |
Authoritative record: CVE-2026-64040 at cve.org
Vendors: linux
Weaknesses: CWE-252
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-64040 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Thursday, October 8, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
