PT-2026-90422

CVE-2026-89706

·

Published

2026-09-11

·

Updated

2026-10-21

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the nfsd component where the write verifier is not rotated when an asynchronous COPY writeback fails. During an async COPY operation, the system captures the nn->writeverf variable and reports it to the client via CB OFFLOAD. If the vfs fsync range() or filemap check wb err() functions within nfsd copy file range() report an error, the server fails to rotate the write verifier. Consequently, when a client receives an NFS UNSTABLE status and issues a COMMIT to ensure data durability, the server returns the unchanged verifier. This leads the client to incorrectly assume the copy is durable, resulting in the silent loss of data that failed writeback.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-100868
OPENSUSE-SU-2026:11880-1
OPENSUSE-SU-2026:22091-1
SUSE-SU-2026:24179-1
SUSE-SU-2026:24184-1
SUSE-SU-2026:24197-1
SUSE-SU-2026:24235-1
SUSE-SU-2026:24371-1
SUSE-SU-2026:24379-1
Found an issue in the description? Have something to add? Feel free to write us 👾