# nfsd: sample writeback error cursor before async COPY loop

CVE record · `CVE-2026-89704`

- **Identifiers:** `CVE-2026-89704`
- **State:** Confirmed
- **Severity:** CVSS 7.5 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 11 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `f14816f2f928c560d28ba344af689f56efcd6f55 to before 435e4246c7dfff2fbd76dfdbf91975d5d9f788c9` (git)
  - affected: `3145fe0ebb16e1715ad541a301bc6675c8375fcd to before 9f539a1c0791f907eb4e6d04b43178d9962e2def` (git)
  - affected: `555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 4728504c021656128a07f4693af80ed4a5fcc863` (git)
  - affected: `555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 322422d66d1a04434a0dcc0c9d3a4c4b3f225117` (git)
  - affected: `555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 52b2db7a72e19ac2686fa4b2a52406661e7bf9e2` (git)
  - affected: `555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 8277d4a11ae2cb5495842be558fd946032c24363` (git)
  - affected: `555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before a1cbafe756cd5e6ab0e099062f37da7a5b081169` (git)
  - affected: `555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 20a67a7d18221af736f124770c2c5e859b479046` (git)
  - affected: `5.10.124 to before 5.10.270` (semver)
  - affected: `5.15.49 to before 5.15.221` (semver)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.17`
  - unaffected: `before 5.17` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.109 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.50 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.4 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 7.5 High, CVSS 3.1: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0053, the 45th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-89704](https://www.cve.org/CVERecord?id=CVE-2026-89704)
- [NVD: CVE-2026-89704](https://nvd.nist.gov/vuln/detail/CVE-2026-89704)

### References from the CNA

- <https://git.kernel.org/stable/c/435e4246c7dfff2fbd76dfdbf91975d5d9f788c9>
- <https://git.kernel.org/stable/c/9f539a1c0791f907eb4e6d04b43178d9962e2def>
- <https://git.kernel.org/stable/c/4728504c021656128a07f4693af80ed4a5fcc863>
- <https://git.kernel.org/stable/c/322422d66d1a04434a0dcc0c9d3a4c4b3f225117>
- <https://git.kernel.org/stable/c/52b2db7a72e19ac2686fa4b2a52406661e7bf9e2>
- <https://git.kernel.org/stable/c/8277d4a11ae2cb5495842be558fd946032c24363>
- <https://git.kernel.org/stable/c/a1cbafe756cd5e6ab0e099062f37da7a5b081169>
- <https://git.kernel.org/stable/c/20a67a7d18221af736f124770c2c5e859b479046>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-89704>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-89704/>. Everything for agents: <https://agentprime.io/llms.txt>.