{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.176-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.12.94-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.0.12-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  cifs: Fix busy dentry used after unmounting  Since commit 340cea84f691c (\"cifs: open files should not hold ref on superblock\"), cifs file only holds the dentry ref_cnt, the cifs file close work(cfile-\u003edeferred) could be executed after unmounting, which will trigger a warning in generic_shutdown_super:  BUG: Dentry 00000000a14a6845{i=c,n=file}  still in use (1) [unmount of  cifs cifs]  The detailed processs is:    process A           process B           kworker  fd = open(PATH)   vfs_open    file-\u003e__f_path = *path // dentry-\u003ed_lockref.count = 1    cifs_open     cifs_new_fileinfo      cfile-\u003edentry = dget(dentry) // dentry-\u003ed_lockref.count = 2  close(fd)   __fput   cifs_close    queue_delayed_work(deferredclose_wq, cfile-\u003edeferred)   dput(dentry) // dentry-\u003ed_lockref.count = 1 \t\t\t                 smb2_deferred_work_close \t\t\t\t\t  _cifsFileInfo_put \t\t\t\t\t   list_del(\u0026cifs_file-\u003eflist)                     umount \t\t     cleanup_mnt \t\t      deactivate_super \t\t       cifs_kill_sb \t\t        cifs_close_all_deferred_files_sb \t\t\t cifs_close_all_deferred_files \t\t\t  // cannot find cfile, skip _cifsFileInfo_put \t\t\tkill_anon_super \t\t\t generic_shutdown_super \t\t\t  shrink_dcache_for_umount \t\t\t   umount_check \t\t\t    WARN ! // dentry-\u003ed_lockref.count = 1 \t\t\t\t\t   cifsFileInfo_put_final \t\t\t\t\t    dput(cifs_file-\u003edentry) \t\t                            // dentry-\u003ed_lockref.count = 0  Fix it by flushing 'deferredclose_wq' before calling kill_anon_super.  Fetch a reproducer in https://bugzilla.kernel.org/show_bug.cgi?id=221548.",
  "id": "DEBIAN-CVE-2026-64108",
  "modified": "2026-09-14T16:47:28.598783775Z",
  "published": "2026-07-19T16:17:52.100Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-64108"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "upstream": [
    "CVE-2026-64108"
  ]
}