CVE-2026-89642cifs: call pagecache_isize_extended() in cifs_setsize() when extending
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: cifs: call pagecache_isize_extended() in cifs_setsize() when extending cifs_setsize() calls truncate_pagecache() but skips pagecache_isize_extended() on extension. truncate_setsize() shows the correct pattern: i_size_write(inode, newsize); if (newsize > oldsize) pagecache_isize_extended(inode, oldsize, newsize); truncate_pagecache(inode, newsize); pagecache_isize_extended() zeroes the tail of the page straddling old EOF. Without it, dirty bytes in that region can be written back to the server, exposing stale data in the newly extended range.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 19, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before e1f692b6da3e632a25d0b3a99f833bb609bae1a3; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 12bafe32f09c0d24f5096154b59c347b9c6606e0; from 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c510edb9734af1c274d18f4f31a471a166bbc7e8 | CNA record |
References
- https://git.kernel.org/stable/c/e1f692b6da3e632a25d0b3a99f833bb609bae1a3
- https://git.kernel.org/stable/c/12bafe32f09c0d24f5096154b59c347b9c6606e0
- https://git.kernel.org/stable/c/c510edb9734af1c274d18f4f31a471a166bbc7e8
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.