CVE-2026-89697

CRITICAL 9.1

nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

CVSS Score

9.1

EPSS Score

0.0%

EPSS Percentile

0th

In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare() can inspect the dentry. This causes nfsd_setattr() to skip fh_want_write(), so notify_change() runs without a mount write reference. Add the missing fh_want_write() call after the early fh_verify().

Vendor	linux
Product	linux
Ecosystems	Linux Kernel
Industries	Technology
Published	Sep 11, 2026
Last Updated	Sep 14, 2026

Stay Ahead of the Next One

Get instant alerts for linux linux

Be the first to know when new critical vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

Linux / Linux

cc265089ce1b176dde963c74b53593446ee7f99a < 3eec9d791968c177a4a8cda9af5c04f79dae09cb cc265089ce1b176dde963c74b53593446ee7f99a < 9229d824b938f4fb0ea7a5dddade51735e6fe6f9 cc265089ce1b176dde963c74b53593446ee7f99a < 2150305134889fb2fc25228d35353bd2f6f29500 cc265089ce1b176dde963c74b53593446ee7f99a < d823bf9285cdf4514873b85ab5a888878dd4e8f4 cc265089ce1b176dde963c74b53593446ee7f99a < 15ca3b64a69caa6194bed8f98a20ed90a11c11dd cc265089ce1b176dde963c74b53593446ee7f99a < 533964d420d385e11b08dd4c56c66ef5dcccaf08 cc265089ce1b176dde963c74b53593446ee7f99a < c4a409b86a92815181a8e9395c6bf1696ad19175 cc265089ce1b176dde963c74b53593446ee7f99a < 4e475be769aa9f7a2c1ce55a2b8592cfccacddcc 1cb57d81cf20fe24b9e2e1daf57bfbdc24b77cd8 3.18.46 < 3.19

Linux / Linux

4.2

References

NVD ↗ CVE.org ↗ EPSS Data ↗