CVE-2026-89693
Unknown
Description
In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the return value of nfsd4_acl_to_attr() in status, but the switch(create->cr_type) block unconditionally overwrites it in every branch. ACL translation errors are silently discarded, and the CREATE proceeds without the requested ACL. Add an early exit check after nfsd4_acl_to_attr(), matching the pattern already used in nfsd4_setattr(). [ cel: prefer NFS4ERR_BADTYPE over NFS4ERR_ATTRNOTSUPP ]
SeverityUnknown
CVSS—
Exploit probability—
Product
Linux
PublishedSep 11, 2026
First seenSep 11, 2026
How to fix
Update
- Linux Linux154acf97ecd2c0bb00f6533f86d4bd2b934475d5, 73dfa989f6f0dedcae1f2650aab3401537044282, 04b913ab96c2a874f41b5e5a19ac7120526723c2, 2d8a8ed4f9d8637ef0f18d47d19193e7b780e90e, 26877d3a09afb3838a053867a655ca30c46a1f81, 430ed49a16cf9ca249d0fb51490582090bc4848b, 80cebb0e8a8d1e758f0d671f5e047279c5c3e528, 2c7912732184773dbd371a411da87af1cc080b86, 5.10.273, 5.15.224 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | c5409ce523af40d5c3019717bc5b4f72038d48be ≤ v < 154acf97ecd2c0bb00f6533f86d4bd2b934475d5, d52acd23a327cada5fb597591267cfc09f08bb1d ≤ v < 73dfa989f6f0dedcae1f2650aab3401537044282, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b ≤ v < 04b913ab96c2a874f41b5e5a19ac7120526723c2, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b ≤ v < 2d8a8ed4f9d8637ef0f18d47d19193e7b780e90e, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b ≤ v < 26877d3a09afb3838a053867a655ca30c46a1f81, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b ≤ v < 430ed49a16cf9ca249d0fb51490582090bc4848b, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b ≤ v < 80cebb0e8a8d1e758f0d671f5e047279c5c3e528, c0cbe70742f4a70893cd6e5f6b10b6e89b6db95b ≤ v < 2c7912732184773dbd371a411da87af1cc080b86, 5.10.220 ≤ v < 5.10.273, 5.15.154 ≤ v < 5.15.224, 6.0 | 154acf97ecd2c0bb00f6533f86d4bd2b934475d5, 73dfa989f6f0dedcae1f2650aab3401537044282, 04b913ab96c2a874f41b5e5a19ac7120526723c2, 2d8a8ed4f9d8637ef0f18d47d19193e7b780e90e, 26877d3a09afb3838a053867a655ca30c46a1f81, 430ed49a16cf9ca249d0fb51490582090bc4848b, 80cebb0e8a8d1e758f0d671f5e047279c5c3e528, 2c7912732184773dbd371a411da87af1cc080b86, 5.10.273, 5.15.224 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.