AZL-100325
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-100325.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-100325
- Upstream
- Published
- 2026-09-11T20:19:56Z
- Modified
- 2026-09-12T14:15:04Z
- Summary
- CVE-2026-89697 affecting package kernel 6.6.150.1-1
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare() can inspect the dentry. This causes nfsd_setattr() to skip fh_want_write(), so notify_change() runs without a mount write reference.
Add the missing fh_want_write() call after the early fh_verify().
- References