In the Linux kernel, the following vulnerability has been resolved:

nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare()
can inspect the dentry. This causes nfsd_setattr() to skip
fh_want_write(), so notify_change() runs without a mount write
reference.

Add the missing fh_want_write() call after the early fh_verify().

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
cc265089ce1b176dde963c74b53593446ee7f99a affected < 15ca3b64a69caa6194bed8f98a20ed90a11c11dd
cc265089ce1b176dde963c74b53593446ee7f99a affected < 533964d420d385e11b08dd4c56c66ef5dcccaf08
cc265089ce1b176dde963c74b53593446ee7f99a affected < c4a409b86a92815181a8e9395c6bf1696ad19175
cc265089ce1b176dde963c74b53593446ee7f99a affected < 4e475be769aa9f7a2c1ce55a2b8592cfccacddcc
1cb57d81cf20fe24b9e2e1daf57bfbdc24b77cd8 affected —
3.18.46 affected < 3.19
Linux Linux affected
Version Status Constraints
4.2 affected —
0 unaffected < 4.2
6.12.109 unaffected ≤ 6.12.*
6.18.50 unaffected ≤ 6.18.*
7.2.4 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/15ca3b64a69caa6194bed8f98a20ed90a11c11dd cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/4e475be769aa9f7a2c1ce55a2b8592cfccacddcc cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/533964d420d385e11b08dd4c56c66ef5dcccaf08 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/c4a409b86a92815181a8e9395c6bf1696ad19175 cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-89697 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-89697 cve-icon
History

Sat, 12 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-911
References
Metrics threat_severity

None

 cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H'}

threat_severity

Important

Fri, 11 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr() The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare() can inspect the dentry. This causes nfsd_setattr() to skip fh_want_write(), so notify_change() runs without a mount write reference. Add the missing fh_want_write() call after the early fh_verify().
Title nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-11T19:46:15.772Z

Reserved: 2026-09-11T19:38:34.750Z

Link: CVE-2026-89697

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-11T20:19:56.843

Modified: 2026-09-11T20:19:56.843

Link: CVE-2026-89697

cve-icon Redhat

Severity : Important

Publid Date: 2026-09-11T19:46:15Z

Links: CVE-2026-89697 - Bugzilla

cve-icon OpenCVE Enrichment

No data.

Weaknesses