https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 08:04:03 +0000 https://cve.radiocsirt.org/vuln/cve-2026-89677 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()</p> <p>dentry_create() can hypothetically provide a different dentry than the one passed in. This could happen, for example, if the exported filesystem is NFS, and the server returned to OPEN a filehandle which matched a directory that was already in the dcache. Clearly this would not be expected!</p> <p>If this were to happen the dentry (child) that was already stored in resfhp could be freed and later dereferenced.</p> <p>We shouldn&#39;t call fh_compose() until we are certain that we have the final dentry, so this patch moved the fh_compose() call to two places: one for the case where the target already exists, and one after dentry_create() where it was created.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfsd: fix possible fh_compose of wrong dentry in nfsd4_create_file()</p> <p>dentry_create() can hypothetically provide a different dentry than the one passed in. This could happen, for example, if the exported filesystem is NFS, and the server returned to OPEN a filehandle which matched a directory that was already in the dcache. Clearly this would not be expected!</p> <p>If this were to happen the dentry (child) that was already stored in resfhp could be freed and later dereferenced.</p> <p>We shouldn&#39;t call fh_compose() until we are certain that we have the final dentry, so this patch moved the fh_compose() call to two places: one for the case where the target already exists, and one after dentry_create() where it was created.</p> https://cve.radiocsirt.org/vuln/cve-2026-89677