01 Record

CVE-2026-89706

nfsd: Reset write verifier when async COPY writeback fails

HighPUBLISHEDCNA: Linux

CNA base score7.5 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

View raw JSON

02 Description

nfsd: Reset write verifier when async COPY writeback fails

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.52% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 44.2% of scored records. A rank, not a probability.
NVD base score: 7.5 (CVSS v3.x), scored by the NVD independently of the CNA.
NVD CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD analysis status: Received. NVD last modified this record on 2026-10-19.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-11 19:46Z1 MO AGO

Last updated

2026-10-19 08:51Z10 DAYS AGO

Reserved

2026-09-11

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.5)

CNA CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weaknesses

CWE-367Time-of-check Time-of-use (TOCTOU) Race ConditionBase
CWE-703Improper Check or Handling of Exceptional ConditionsPillar

Data version

5.2

Document digest

a266193b923f01e8821bb6c5cf7b47ae88248549825d2406b6c78ea43b2efcf8

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux817c6eb975798647c4bbbfc9eb288aa413ec7f65 to < cc5f7cef0659a27c13dd33edd8e2f79257b095c6, eac0b17a77fbd763d305a5eaa4fd1119e5a0fe0d to < c6d2f6372c7e0f76b9c148ff7696aec64da0b5b7, eac0b17a77fbd763d305a5eaa4fd1119e5a0fe0d to < 8a08ffe73eb2aa6bc6f88763da7e2b55bab6493a, eac0b17a77fbd763d305a5eaa4fd1119e5a0fe0d to < 6b13d26cc21b6320a3c61d5e4cee2ce9a589b181, eac0b17a77fbd763d305a5eaa4fd1119e5a0fe0d to < 31d4d0a62ec4bafbcdbad142f11ab1f90794b1d0, eac0b17a77fbd763d305a5eaa4fd1119e5a0fe0d to < 591134e059e3456180244a826d6917cdc183140b, eac0b17a77fbd763d305a5eaa4fd1119e5a0fe0d to < bf0cd31a9abcb728c17d79b4c2cc533612a8b6af, eac0b17a77fbd763d305a5eaa4fd1119e5a0fe0d to < f5cb2276954cb80987a93ef9f9dfbfdbfc0f10b9, 5.10.220 to < 5.10.270, 5.14—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/cc5f7cef0659a27c13dd33edd8e2f79257b095c6
git.kernel.orghttps://git.kernel.org/stable/c/c6d2f6372c7e0f76b9c148ff7696aec64da0b5b7
git.kernel.orghttps://git.kernel.org/stable/c/8a08ffe73eb2aa6bc6f88763da7e2b55bab6493a
git.kernel.orghttps://git.kernel.org/stable/c/6b13d26cc21b6320a3c61d5e4cee2ce9a589b181
git.kernel.orghttps://git.kernel.org/stable/c/31d4d0a62ec4bafbcdbad142f11ab1f90794b1d0
git.kernel.orghttps://git.kernel.org/stable/c/591134e059e3456180244a826d6917cdc183140b
git.kernel.orghttps://git.kernel.org/stable/c/bf0cd31a9abcb728c17d79b4c2cc533612a8b6af
git.kernel.orghttps://git.kernel.org/stable/c/f5cb2276954cb80987a93ef9f9dfbfdbfc0f10b9

07 Fixed in

Debian 12

linux
Fixed in 6.1.190-1
linux-6.12
Fixed in 6.12.111-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.111-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.6-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.