by Kastro CVE-2026-89697
Linux Linux — nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
Description · from the CVE record
In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare() can inspect the dentry. This causes nfsd_setattr() to skip fh_want_write(), so notify_change() runs without a mount write reference. Add the missing fh_want_write() call after the early fh_verify().
Affected
ProductAffectedFixed inSource
Linuxcc265089ce1b176dde963c74b53593446ee7f99a – < 3eec9d791968c177a4a8cda9af5c04f79dae09cb3eec9d791968c177a4a8cda9af5c04f79dae09cbCNA
Linuxcc265089ce1b176dde963c74b53593446ee7f99a – < 9229d824b938f4fb0ea7a5dddade51735e6fe6f99229d824b938f4fb0ea7a5dddade51735e6fe6f9CNA
Linuxcc265089ce1b176dde963c74b53593446ee7f99a – < 2150305134889fb2fc25228d35353bd2f6f295002150305134889fb2fc25228d35353bd2f6f29500CNA
Linuxcc265089ce1b176dde963c74b53593446ee7f99a – < d823bf9285cdf4514873b85ab5a888878dd4e8f4d823bf9285cdf4514873b85ab5a888878dd4e8f4CNA
Linuxcc265089ce1b176dde963c74b53593446ee7f99a – < 15ca3b64a69caa6194bed8f98a20ed90a11c11dd15ca3b64a69caa6194bed8f98a20ed90a11c11ddCNA
Linuxcc265089ce1b176dde963c74b53593446ee7f99a – < 533964d420d385e11b08dd4c56c66ef5dcccaf08533964d420d385e11b08dd4c56c66ef5dcccaf08CNA
Linuxcc265089ce1b176dde963c74b53593446ee7f99a – < c4a409b86a92815181a8e9395c6bf1696ad19175c4a409b86a92815181a8e9395c6bf1696ad19175CNA
Linuxcc265089ce1b176dde963c74b53593446ee7f99a – < 4e475be769aa9f7a2c1ce55a2b8592cfccacddcc4e475be769aa9f7a2c1ce55a2b8592cfccacddccCNA
Linux1cb57d81cf20fe24b9e2e1daf57bfbdc24b77cd8–CNA
Linux3.18.46 – < 3.193.19CNA
Linux4.2–CNA
Scores by source
Linux (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial