# CVE-2026-89697

## Summary

- **CVE ID:** CVE-2026-89697
- **Severity:** CRITICAL
- **CVSS Score:** 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H)
- **CWE:** N/A
- **Published:** Sep 11, 2026
- **Last Modified:** Sep 14, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:

nfsd: add fh_want_write() for early-verified SETATTR in nfsd_proc_setattr()

The BOTH_TIME_SET branch calls fh_verify() early so setattr_prepare()
can inspect the dentry. This causes nfsd_setattr() to skip
fh_want_write(), so notify_change() runs without a mount write
reference.

Add the missing fh_want_write() call after the early fh_verify().

## Affected Products

- Linux — Linux (cc265089ce1b176dde963c74b53593446ee7f99a)
- Linux — Linux (1cb57d81cf20fe24b9e2e1daf57bfbdc24b77cd8)
- Linux — Linux (3.18.46)
- Linux — Linux (4.2)
- Linux — Linux (0)
- Linux — Linux (6.12.109)
- Linux — Linux (6.18.50)
- Linux — Linux (7.2.4)
- Linux — Linux (7.3-rc1)
- Linux — Linux (5.10.270)
- Linux — Linux (5.15.221)
- Linux — Linux (6.1.188)
- Linux — Linux (6.6.157)

## References

- [CNA](https://git.kernel.org/stable/c/15ca3b64a69caa6194bed8f98a20ed90a11c11dd)
- [CNA](https://git.kernel.org/stable/c/533964d420d385e11b08dd4c56c66ef5dcccaf08)
- [CNA](https://git.kernel.org/stable/c/c4a409b86a92815181a8e9395c6bf1696ad19175)
- [CNA](https://git.kernel.org/stable/c/4e475be769aa9f7a2c1ce55a2b8592cfccacddcc)
- [CNA](https://git.kernel.org/stable/c/3eec9d791968c177a4a8cda9af5c04f79dae09cb)
- [CNA](https://git.kernel.org/stable/c/9229d824b938f4fb0ea7a5dddade51735e6fe6f9)
- [CNA](https://git.kernel.org/stable/c/2150305134889fb2fc25228d35353bd2f6f29500)
- [CNA](https://git.kernel.org/stable/c/d823bf9285cdf4514873b85ab5a888878dd4e8f4)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.69%
- **EPSS Percentile:** 50.9

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._