CVE-2026-89697

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89697
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89697.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89697
Downstream
AZL (1)
BELL (1)
DEBIAN (1)
MGASA (2)
openSUSE (2)
SUSE (8)
UBUNTU (1)
Related
openSUSE (2)
SUSE (8)
Published
2026-09-11T19:46:15Z
Modified
2026-10-24T02:30:27Z
Severity
  • 9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H CVSS Calculator
Summary
nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
Details

In the Linux kernel, the following vulnerability has been resolved:

nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare() can inspect the dentry. This causes nfsd_setattr() to skip fh_want_write(), so notify_change() runs without a mount write reference.

Add the missing fh_want_write() call after the early fh_verify().

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89697.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
cc265089ce1b176dde963c74b53593446ee7f99a
Fixed
3eec9d791968c177a4a8cda9af5c04f79dae09cb
Fixed
9229d824b938f4fb0ea7a5dddade51735e6fe6f9
Fixed
2150305134889fb2fc25228d35353bd2f6f29500
Fixed
d823bf9285cdf4514873b85ab5a888878dd4e8f4
Fixed
15ca3b64a69caa6194bed8f98a20ed90a11c11dd
Fixed
533964d420d385e11b08dd4c56c66ef5dcccaf08
Fixed
c4a409b86a92815181a8e9395c6bf1696ad19175
Fixed
4e475be769aa9f7a2c1ce55a2b8592cfccacddcc
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
3.18.46
Fixed
3.19
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
1cb57d81cf20fe24b9e2e1daf57bfbdc24b77cd8

Affected versions

v3.*
v3.18.100
v3.18.101
v3.18.102
v3.18.103
v3.18.104
v3.18.105
v3.18.106
v3.18.107
v3.18.108
v3.18.109
v3.18.110
v3.18.111
v3.18.112
v3.18.113
v3.18.114
v3.18.115
v3.18.116
v3.18.117
v3.18.118
v3.18.119
v3.18.120
v3.18.121
v3.18.122
v3.18.123
v3.18.124
v3.18.125
v3.18.126
v3.18.127
v3.18.128
v3.18.129
v3.18.130
v3.18.131
v3.18.132
v3.18.133
v3.18.134
v3.18.135
v3.18.136
v3.18.137
v3.18.138
v3.18.139
v3.18.140
v3.18.46
v3.18.47
v3.18.48
v3.18.49
v3.18.50
v3.18.51
v3.18.52
v3.18.53
v3.18.54
v3.18.55
v3.18.56
v3.18.57
v3.18.58
v3.18.59
v3.18.60
v3.18.61
v3.18.62
v3.18.63
v3.18.64
v3.18.65
v3.18.66
v3.18.67
v3.18.68
v3.18.69
v3.18.70
v3.18.71
v3.18.72
v3.18.73
v3.18.74
v3.18.75
v3.18.76
v3.18.77
v3.18.78
v3.18.79
v3.18.80
v3.18.81
v3.18.82
v3.18.83
v3.18.84
v3.18.85
v3.18.86
v3.18.87
v3.18.88
v3.18.89
v3.18.90
v3.18.91
v3.18.92
v3.18.93
v3.18.94
v3.18.95
v3.18.96
v3.18.97
v3.18.98
v3.18.99

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89697.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.2.0
Fixed
5.10.270
Type
ECOSYSTEM
Events
Introduced
5.11.0
Fixed
5.15.221
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.188
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.109
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.50
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89697.json"