{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89687", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.749Z", "datePublished": "2026-09-11T19:46:08.630Z", "dateUpdated": "2026-09-11T19:46:08.630Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-11T19:46:08.630Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: ensure nfsd_file_do_acquire() does not use a non-opened file\n\n->atomic_open is permitted to return success without actually opening\nthe file. It indicates this by calling finish_no_open().\nThis means dentry_create() can return a file which hasn't been opened.\nThis is extremely unlikely as ->atomic_open handlers typically\nuse finish_no_open() only for already existing files, and dentry_create()\nisn't called in that case, and the parent being locked should prevent\nraces.\n\nHowever out of an abundance of caution it seems wise to teach nfsd to\nonly use the file returned by dentry_create() if FMODE_OPENED is set,\nindicating that it has in fact been opened."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/nfsd/filecache.c"], "versions": [{"version": "64a989dbd144e0622371396461b11335459692d2", "lessThan": "a95a1cffacd0203100297001719160160f443dd6", "status": "affected", "versionType": "git"}, {"version": "64a989dbd144e0622371396461b11335459692d2", "lessThan": "5859cc01fee06a2cd7458905a9593082fbab06e1", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/nfsd/filecache.c"], "versions": [{"version": "7.0", "status": "affected"}, {"version": "0", "lessThan": "7.0", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.0", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "7.0", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/a95a1cffacd0203100297001719160160f443dd6"}, {"url": "https://git.kernel.org/stable/c/5859cc01fee06a2cd7458905a9593082fbab06e1"}], "title": "nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/nfsd/filecache.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "a95a1cffacd0203100297001719160160f443dd6", "status": "affected", "version": "64a989dbd144e0622371396461b11335459692d2", "versionType": "git"}, {"lessThan": "5859cc01fee06a2cd7458905a9593082fbab06e1", "status": "affected", "version": "64a989dbd144e0622371396461b11335459692d2", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/nfsd/filecache.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "7.0"}, {"lessThan": "7.0", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: ensure nfsd_file_do_acquire() does not use a non-opened file\n\n->atomic_open is permitted to return success without actually opening\nthe file. It indicates this by calling finish_no_open().\nThis means dentry_create() can return a file which hasn't been opened.\nThis is extremely unlikely as ->atomic_open handlers typically\nuse finish_no_open() only for already existing files, and dentry_create()\nisn't called in that case, and the parent being locked should prevent\nraces.\n\nHowever out of an abundance of caution it seems wise to teach nfsd to\nonly use the file returned by dentry_create() if FMODE_OPENED is set,\nindicating that it has in fact been opened."}], "id": "CVE-2026-89687", "lastModified": "2026-09-11T20:19:55.663", "metrics": {}, "published": "2026-09-11T20:19:55.663", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/5859cc01fee06a2cd7458905a9593082fbab06e1"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/a95a1cffacd0203100297001719160160f443dd6"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux Kernel (nfsd): Improper file handling could lead to system instability", "id": "2532086", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532086"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.9", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-908", "details": ["A flaw was found in the Linux kernel's Network File System Daemon (nfsd). The `nfsd_file_do_acquire()` function might attempt to use a file that has not been fully opened, as the `->atomic_open` operation could return success prematurely. While this scenario is considered highly improbable, it could lead to incorrect file operations and potential system instability or denial of service under specific, rare conditions."], "name": "CVE-2026-89687", "package_state": [{"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-11T19:46:08Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89687\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89687\nhttps://git.kernel.org/stable/c/5859cc01fee06a2cd7458905a9593082fbab06e1\nhttps://git.kernel.org/stable/c/a95a1cffacd0203100297001719160160f443dd6"], "threat_severity": "Moderate"}

{"created": "2026-09-12T05:30:08.271549+00:00", "updated": "2026-09-12T05:30:08.271555+00:00", "vendors": []}