9.1

CVE-2026-89697

nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

In the Linux kernel, the following vulnerability has been resolved:

nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare()
can inspect the dentry. This causes nfsd_setattr() to skip
fh_want_write(), so notify_change() runs without a mount write
reference.

Add the missing fh_want_write() call after the early fh_verify().
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version cc265089ce1b176dde963c74b53593446ee7f99a
Version < 3eec9d791968c177a4a8cda9af5c04f79dae09cb
Status affected
Version cc265089ce1b176dde963c74b53593446ee7f99a
Version < 9229d824b938f4fb0ea7a5dddade51735e6fe6f9
Status affected
Version cc265089ce1b176dde963c74b53593446ee7f99a
Version < 2150305134889fb2fc25228d35353bd2f6f29500
Status affected
Version cc265089ce1b176dde963c74b53593446ee7f99a
Version < d823bf9285cdf4514873b85ab5a888878dd4e8f4
Status affected
Version cc265089ce1b176dde963c74b53593446ee7f99a
Version < 15ca3b64a69caa6194bed8f98a20ed90a11c11dd
Status affected
Version cc265089ce1b176dde963c74b53593446ee7f99a
Version < 533964d420d385e11b08dd4c56c66ef5dcccaf08
Status affected
Version cc265089ce1b176dde963c74b53593446ee7f99a
Version < c4a409b86a92815181a8e9395c6bf1696ad19175
Status affected
Version cc265089ce1b176dde963c74b53593446ee7f99a
Version < 4e475be769aa9f7a2c1ce55a2b8592cfccacddcc
Status affected
Version 1cb57d81cf20fe24b9e2e1daf57bfbdc24b77cd8
Status affected
Version 3.18.46
Version < 3.19
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.2
Status affected
Version 0
Version < 4.2
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.6% 0.47
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 9.1 3.9 5.2
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/15ca3b64a69caa6194bed8f98a20ed90a11c11dd
https://git.kernel.org/stable/c/533964d420d385e11b08dd4c56c66ef5dcccaf08
https://git.kernel.org/stable/c/c4a409b86a92815181a8e9395c6bf1696ad19175
https://git.kernel.org/stable/c/4e475be769aa9f7a2c1ce55a2b8592cfccacddcc
https://git.kernel.org/stable/c/2150305134889fb2fc25228d35353bd2f6f29500
https://git.kernel.org/stable/c/3eec9d791968c177a4a8cda9af5c04f79dae09cb
https://git.kernel.org/stable/c/9229d824b938f4fb0ea7a5dddade51735e6fe6f9
https://git.kernel.org/stable/c/d823bf9285cdf4514873b85ab5a888878dd4e8f4