PT-2026-90413 · Linux · Linux

CVE-2026-89697

·

Published

2026-09-11

·

Updated

2026-09-11

None

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
nfsd: add fh want write() for early-verified SETATTR in nfsd proc setattr()
The BOTH TIME SET branch calls fh verify() early so setattr prepare() can inspect the dentry. This causes nfsd setattr() to skip fh want write(), so notify change() runs without a mount write reference.
Add the missing fh want write() call after the early fh verify().
Found an issue in the description? Have something to add? Feel free to write us 👾

Related Identifiers

CVE-2026-89697

Affected Products

Linux