CVE-2026-89697

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.2.6-1.1

Description An issue exists in the nfsd proc setattr() function where the BOTH TIME SET branch triggers an early call to fh verify(). This sequence allows setattr prepare() to inspect the dentry but causes nfsd setattr() to bypass the fh want write() function. Consequently, notify change() is executed without a required mount write reference.

Recommendations Update to version 7.2.6-1.1.