{"id":"CVE-2026-89697","summary":"nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()","details":"In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()\n\nThe BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare()\ncan inspect the dentry. This causes nfsd_setattr() to skip\nfh_want_write(), so notify_change() runs without a mount write\nreference.\n\nAdd the missing fh_want_write() call after the early fh_verify().","modified":"2026-10-28T02:30:38.336580966Z","published":"2026-09-11T19:46:15.772Z","related":["SUSE-SU-2026:24179-1","SUSE-SU-2026:24181-1","SUSE-SU-2026:24182-1","SUSE-SU-2026:24184-1","SUSE-SU-2026:24197-1","SUSE-SU-2026:24235-1","SUSE-SU-2026:24315-1","SUSE-SU-2026:24316-1","SUSE-SU-2026:4640-1","SUSE-SU-2026:4706-1","openSUSE-SU-2026:11805-1","openSUSE-SU-2026:22091-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89697.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/15ca3b64a69caa6194bed8f98a20ed90a11c11dd"},{"type":"WEB","url":"https://git.kernel.org/stable/c/2150305134889fb2fc25228d35353bd2f6f29500"},{"type":"WEB","url":"https://git.kernel.org/stable/c/3eec9d791968c177a4a8cda9af5c04f79dae09cb"},{"type":"WEB","url":"https://git.kernel.org/stable/c/4e475be769aa9f7a2c1ce55a2b8592cfccacddcc"},{"type":"WEB","url":"https://git.kernel.org/stable/c/533964d420d385e11b08dd4c56c66ef5dcccaf08"},{"type":"WEB","url":"https://git.kernel.org/stable/c/9229d824b938f4fb0ea7a5dddade51735e6fe6f9"},{"type":"WEB","url":"https://git.kernel.org/stable/c/c4a409b86a92815181a8e9395c6bf1696ad19175"},{"type":"WEB","url":"https://git.kernel.org/stable/c/d823bf9285cdf4514873b85ab5a888878dd4e8f4"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89697.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89697"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"cc265089ce1b176dde963c74b53593446ee7f99a"},{"fixed":"3eec9d791968c177a4a8cda9af5c04f79dae09cb"},{"fixed":"9229d824b938f4fb0ea7a5dddade51735e6fe6f9"},{"fixed":"2150305134889fb2fc25228d35353bd2f6f29500"},{"fixed":"d823bf9285cdf4514873b85ab5a888878dd4e8f4"},{"fixed":"15ca3b64a69caa6194bed8f98a20ed90a11c11dd"},{"fixed":"533964d420d385e11b08dd4c56c66ef5dcccaf08"},{"fixed":"c4a409b86a92815181a8e9395c6bf1696ad19175"},{"fixed":"4e475be769aa9f7a2c1ce55a2b8592cfccacddcc"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"3.18.46"},{"fixed":"3.19"}]},{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"1cb57d81cf20fe24b9e2e1daf57bfbdc24b77cd8"}]}],"versions":["v3.18.140","v3.18.139","v3.18.138","v3.18.137","v3.18.136","v3.18.135","v3.18.134","v3.18.133","v3.18.132","v3.18.131","v3.18.130","v3.18.129","v3.18.128","v3.18.127","v3.18.126","v3.18.125","v3.18.124","v3.18.123","v3.18.122","v3.18.121","v3.18.120","v3.18.119","v3.18.118","v3.18.117","v3.18.116","v3.18.115","v3.18.114","v3.18.113","v3.18.112","v3.18.111","v3.18.110","v3.18.109","v3.18.108","v3.18.107","v3.18.106","v3.18.105","v3.18.104","v3.18.103","v3.18.102","v3.18.101","v3.18.100","v3.18.99","v3.18.98","v3.18.97","v3.18.96","v3.18.95","v3.18.94","v3.18.93","v3.18.92","v3.18.91","v3.18.90","v3.18.89","v3.18.88","v3.18.87","v3.18.86","v3.18.85","v3.18.84","v3.18.83","v3.18.82","v3.18.81","v3.18.80","v3.18.79","v3.18.78","v3.18.77","v3.18.76","v3.18.75","v3.18.74","v3.18.73","v3.18.72","v3.18.71","v3.18.70","v3.18.69","v3.18.68","v3.18.67","v3.18.66","v3.18.65","v3.18.64","v3.18.63","v3.18.62","v3.18.61","v3.18.60","v3.18.59","v3.18.58","v3.18.57","v3.18.56","v3.18.55","v3.18.54","v3.18.53","v3.18.52","v3.18.51","v3.18.50","v3.18.49","v3.18.48","v3.18.47","v3.18.46"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89697.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.2.0"},{"fixed":"5.10.270"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.11.0"},{"fixed":"5.15.221"}]},{"type":"ECOSYSTEM","events":[{"introduced":"5.16.0"},{"fixed":"6.1.188"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.2.0"},{"fixed":"6.6.157"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.7.0"},{"fixed":"6.12.109"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.13.0"},{"fixed":"6.18.50"}]},{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.4"}]}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89697.json"}}],"schema_version":"1.9.2","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H"}]}