CVE-2026-89687

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-89687

Key Details

CVE	CVE-2026-89687
CVSS Score / Version	7.5 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file

->atomic_open is permitted to return success without actually opening

the file. It indicates this by calling finish_no_open().

This means dentry_create() can return a file which hasn't been opened.

This is extremely unlikely as ->atomic_open handlers typically

use finish_no_open() only for already existing files, and dentry_create()

isn't called in that case, and the parent being locked should prevent

races.

However out of an abundance of caution it seems wise to teach nfsd to

only use the file returned by dentry_create() if FMODE_OPENED is set,

indicating that it has in fact been opened. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-89687
CVE	https://www.cve.org/CVERecord?id=CVE-2026-89687

Source

Reference

NVD

CVE