CVE-2026-89672

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1

Description An issue exists in the NFSACL v2 SETACL path where the nfsacld proc setacl() function passes pointers to set posix acl() unconditionally. Because nfsaclsvc decode setaclargs() only populates argp->acl access when NFS ACL is set and argp->acl default when NFS DFACL is set, any omitted pointer is treated as NULL. In the Virtual File System (VFS), passing a NULL value to set posix acl() triggers a removal operation for that ACL type. Consequently, a SETACL request containing only NFS ACL will silently remove the directory's default ACL, and a request with a mask of 0 will remove both ACL types.

Recommendations Update the Linux kernel to version 7.2.6-1.1 or later.