« Volver al listado

CVE-2026-89683

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

nfsd: fix dentry ref leak on V4ROOT export filehandle lookup

nfsd_set_fh_dentry() leaks the dentry reference from exportfs_decode_fh_raw() when the NFS3_FHSIZE or NFS_FHSIZE switch cases detect NFSEXP_V4ROOT and goto out. The out: label calls exp_put() but never dput(dentry), and fhp->fh_dentry was never assigned so fh_put() cannot compensate.

A crafted NFSv3 filehandle targeting a V4ROOT export's fsid triggers the leak on every request.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-89683",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444",
              "lessThan": "d493cf57f4c4dae5396cd6ad41e5c209d0615a81",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444",
              "lessThan": "c1ae0f973bcba5730871e35976a0ab6878fdac34",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444",
              "lessThan": "11db8df188b34bdb8c6a3a0bf438e5fc8cd75aca",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "ef7f6c4904d03ccd7478e1ac20ed75f79c4ac444",
              "lessThan": "6247023fbbec1325029f2d5f2a7cdc0f9f9ea15a",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "fs/nfsd/nfsfh.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.12"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "6.12",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "fs/nfsd/nfsfh.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-11T20:19:55.173",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/11db8df188b34bdb8c6a3a0bf438e5fc8cd75aca",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/6247023fbbec1325029f2d5f2a7cdc0f9f9ea15a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/c1ae0f973bcba5730871e35976a0ab6878fdac34",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/d493cf57f4c4dae5396cd6ad41e5c209d0615a81",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnfsd: fix dentry ref leak on V4ROOT export filehandle lookup\n\nnfsd_set_fh_dentry() leaks the dentry reference from\nexportfs_decode_fh_raw() when the NFS3_FHSIZE or NFS_FHSIZE\nswitch cases detect NFSEXP_V4ROOT and goto out. The out: label\ncalls exp_put() but never dput(dentry), and fhp->fh_dentry was\nnever assigned so fh_put() cannot compensate.\n\nA crafted NFSv3 filehandle targeting a V4ROOT export's fsid\ntriggers the leak on every request."
    }
  ],
  "lastModified": "2026-09-11T20:19:55.173",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}