PT-2026-90413
CVE-2026-89697
·
تاريخ النشر
2026-09-11
·
تاريخ التحديث
2026-10-16
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 7.2.6-1.1
Description
An issue exists in the
nfsd proc setattr() function where the BOTH TIME SET branch triggers an early call to fh verify(). This sequence allows setattr prepare() to inspect the dentry but causes nfsd setattr() to bypass the fh want write() function. Consequently, notify change() is executed without a required mount write reference.Recommendations
Update to version 7.2.6-1.1.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾