{"id":"AZL-100884","summary":"CVE-2026-89642 affecting package kernel 6.6.150.1-1","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: call pagecache_isize_extended() in cifs_setsize() when extending\n\ncifs_setsize() calls truncate_pagecache() but skips\npagecache_isize_extended() on extension.  truncate_setsize() shows\nthe correct pattern:\n\n  i_size_write(inode, newsize);\n  if (newsize \u003e oldsize)\n      pagecache_isize_extended(inode, oldsize, newsize);\n  truncate_pagecache(inode, newsize);\n\npagecache_isize_extended() zeroes the tail of the page straddling old\nEOF.  Without it, dirty bytes in that region can be written back to\nthe server, exposing stale data in the newly extended range.","modified":"2026-09-13T06:06:36Z","published":"2026-09-11T20:19:49Z","upstream":["CVE-2026-89642"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89642"}],"affected":[{"package":{"name":"kernel","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/kernel"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"6.6.150.1-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-100884.json"}}],"schema_version":"1.9.0"}