Package
linux-qemu-6.18-bootc
Component
linux-kernel
Latest update
7.8
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
CVE-2026-64057 affects the AFS filesystem client (fs/afs, afs_get_link() locking), which is only built when CONFIG_AFS_FS is enabled. That option is not enabled in any Chainguard kernel configuration ('# CONFIG_AFS_FS is not set'), so the vulnerable code is not included in the shipped kernel.
Status
Previous location
/usr/lib/modules/6.18.48-r0-qemu-6.18/vmlinuzNew location
/usr/lib/modules/6.18.49-r0-qemu-6.18/vmlinuzImpact
version-only path change detected during APK rebuild
Status