https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 02:59:35 +0000 https://cve.radiocsirt.org/vuln/cve-2026-89687 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file</p> <p>-&gt;atomic_open is permitted to return success without actually opening the file. It indicates this by calling finish_no_open(). This means dentry_create() can return a file which hasn&#39;t been opened. This is extremely unlikely as -&gt;atomic_open handlers typically use finish_no_open() only for already existing files, and dentry_create() isn&#39;t called in that case, and the parent being locked should prevent races.</p> <p>However out of an abundance of caution it seems wise to teach nfsd to only use the file returned by dentry_create() if FMODE_OPENED is set, indicating that it has in fact been opened.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>nfsd: ensure nfsd_file_do_acquire() does not use a non-opened file</p> <p>-&gt;atomic_open is permitted to return success without actually opening the file. It indicates this by calling finish_no_open(). This means dentry_create() can return a file which hasn&#39;t been opened. This is extremely unlikely as -&gt;atomic_open handlers typically use finish_no_open() only for already existing files, and dentry_create() isn&#39;t called in that case, and the parent being locked should prevent races.</p> <p>However out of an abundance of caution it seems wise to teach nfsd to only use the file returned by dentry_create() if FMODE_OPENED is set, indicating that it has in fact been opened.</p> https://cve.radiocsirt.org/vuln/cve-2026-89687