CVE-2026-89697
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2026
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare() can inspect the dentry. This causes nfsd_setattr() to skip fh_want_write(), so notify_change() runs without a mount write reference. Add the missing fh_want_write() call after the early fh_verify().
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
unaffected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| cc265089ce1b176dde963c74b53593446ee7f99a | affected | git | 3eec9d791968c177a4a8cda9af5c04f79dae09cb | Unavailable | None listed |
| cc265089ce1b176dde963c74b53593446ee7f99a | affected | git | 9229d824b938f4fb0ea7a5dddade51735e6fe6f9 | Unavailable | None listed |
| cc265089ce1b176dde963c74b53593446ee7f99a | affected | git | 2150305134889fb2fc25228d35353bd2f6f29500 | Unavailable | None listed |
| cc265089ce1b176dde963c74b53593446ee7f99a | affected | git | d823bf9285cdf4514873b85ab5a888878dd4e8f4 | Unavailable | None listed |
| cc265089ce1b176dde963c74b53593446ee7f99a | affected | git | 15ca3b64a69caa6194bed8f98a20ed90a11c11dd | Unavailable | None listed |
| cc265089ce1b176dde963c74b53593446ee7f99a | affected | git | 533964d420d385e11b08dd4c56c66ef5dcccaf08 | Unavailable | None listed |
| cc265089ce1b176dde963c74b53593446ee7f99a | affected | git | c4a409b86a92815181a8e9395c6bf1696ad19175 | Unavailable | None listed |
| cc265089ce1b176dde963c74b53593446ee7f99a | affected | git | 4e475be769aa9f7a2c1ce55a2b8592cfccacddcc | Unavailable | None listed |
| 1cb57d81cf20fe24b9e2e1daf57bfbdc24b77cd8 | affected | git | Unavailable | Unavailable | None listed |
| 3.18.46 | affected | semver | 3.19 | Unavailable | None listed |
Linux
- Vendor
- Linux
- Product
- Linux
- Platforms
- Unknown
- Default status
affected
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 4.2 | affected | Unavailable | Unavailable | Unavailable | None listed |
| 0 | unaffected | semver | 4.2 | Unavailable | None listed |
| 5.10.270 | unaffected | semver | Unavailable | 5.10.* | None listed |
| 5.15.221 | unaffected | semver | Unavailable | 5.15.* | None listed |
| 6.1.188 | unaffected | semver | Unavailable | 6.1.* | None listed |
| 6.6.157 | unaffected | semver | Unavailable | 6.6.* | None listed |
| 6.12.109 | unaffected | semver | Unavailable | 6.12.* | None listed |
| 6.18.50 | unaffected | semver | Unavailable | 6.18.* | None listed |
| 7.2.4 | unaffected | semver | Unavailable | 7.2.* | None listed |
| 7.3 | unaffected | original_commit_for_fix | Unavailable | * | None listed |