PT-2026-90417 · Linux · Linux
CVE-2026-89701
·
Published
2026-09-11
·
Updated
2026-09-11
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
nfsd: validate nseconds in TIME DELEG decode paths
The xdrgen-based TIME DELEG ACCESS and TIME DELEG MODIFY decode arms
store a raw uint32 t nseconds directly into tv nsec without enforcing
nseconds < NSEC PER SEC. The legacy nfsd4 decode nfstime4 has this
check but the TIME DELEG paths do not. A malformed timespec can
propagate through notify change() to disk.
Add range checks in both nfs4xdr.c (SETATTR path) and
nfs4callback.c (CB GETATTR path).
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux