CVE-2026-89693nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the return value of nfsd4_acl_to_attr() in status, but the switch(create->cr_type) block unconditionally overwrites it in every branch. ACL translation errors are silently discarded, and the CREATE proceeds without the requested ACL. Add an early exit check after nfsd4_acl_to_attr(), matching the pattern already used in nfsd4_setattr(). [ cel: prefer NFS4ERR_BADTYPE over NFS4ERR_ATTRNOTSUPP ]
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 21, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b before 26877d3a09afb3838a053867a655ca30c46a1f81; from c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b before 430ed49a16cf9ca249d0fb51490582090bc4848b; from c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b before 80cebb0e8a8d1e758f0d671f5e047279c5c3e528; from c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b before 2c7912732184773dbd371a411da87af1cc080b86; c5409ce523af40d5c3019717bc5b4f72038d48be; d52acd23a327cada5fb597591267cfc09f08bb1d; from 5.10.220 before 5.11; from 5.15.154 before 5.16 | CNA record |
References
- https://git.kernel.org/stable/c/26877d3a09afb3838a053867a655ca30c46a1f81
- https://git.kernel.org/stable/c/430ed49a16cf9ca249d0fb51490582090bc4848b
- https://git.kernel.org/stable/c/80cebb0e8a8d1e758f0d671f5e047279c5c3e528
- https://git.kernel.org/stable/c/2c7912732184773dbd371a411da87af1cc080b86
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.