CVE record · CVE-2026-89704

nfsd: sample writeback error cursor before async COPY loop

CVSS 7.5 HighEPSS 0.0053 · 45th percentile

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:46 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
Linux	Linux	affected f14816f2f928c560d28ba344af689f56efcd6f55 to before 435e4246c7dfff2fbd76dfdbf91975d5d9f788c9 git affected 3145fe0ebb16e1715ad541a301bc6675c8375fcd to before 9f539a1c0791f907eb4e6d04b43178d9962e2def git affected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 4728504c021656128a07f4693af80ed4a5fcc863 git affected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 322422d66d1a04434a0dcc0c9d3a4c4b3f225117 git affected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 52b2db7a72e19ac2686fa4b2a52406661e7bf9e2 git affected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 8277d4a11ae2cb5495842be558fd946032c24363 git affected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before a1cbafe756cd5e6ab0e099062f37da7a5b081169 git affected 555dbf1a9aac6d3150c8b52fa35f768a692f4eeb to before 20a67a7d18221af736f124770c2c5e859b479046 git affected 5.10.124 to before 5.10.270 semver affected 5.15.49 to before 5.15.221 semver Other versions: unaffected
Linux	Linux	affected 5.17 unaffected before 5.17 semver unaffected 5.10.270 to 5.10., inclusive semver unaffected 5.15.221 to 5.15., inclusive semver unaffected 6.1.188 to 6.1., inclusive semver unaffected 6.6.157 to 6.6., inclusive semver unaffected 6.12.109 to 6.12., inclusive semver unaffected 6.18.50 to 6.18., inclusive semver unaffected 7.2.4 to 7.2., inclusive semver unaffected 7.3 to , inclusive original_commit_for_fix Other versions: affected

Identifiers: CVE-2026-89704
CNA: Linux
Tags: Linux kernel
Published: 11 Sept 2026
Updated: 19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
7.5	High	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N	CNA (Linux)

CISA KEV Not listed.
EPSS 0.0053, the 45th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.