CVE-2026-89642

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the CIFS component where the cifs setsize() function fails to call pagecache isize extended() during file extension. While cifs setsize() invokes truncate pagecache(), it omits the necessary call to pagecache isize extended(), which is responsible for zeroing the tail of the page straddling the old End Of File (EOF). Consequently, dirty bytes in that region may be written back to the server, potentially exposing stale data within the newly extended range.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.