Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-89693 Details

Description

In the Linux kernel, the following vulnerability has been resolved: nfsd: check nfsd4_acl_to_attr() return value in nfsd4_create() nfsd4_create() stores the return value of nfsd4_acl_to_attr() in status, but the switch(create->cr_type) block unconditionally overwrites it in every branch. ACL translation errors are silently discarded, and the CREATE proceeds without the requested ACL. Add an early exit check after nfsd4_acl_to_attr(), matching the pattern already used in nfsd4_setattr(). [ cel: prefer NFS4ERR_BADTYPE over NFS4ERR_ATTRNOTSUPP ]

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/26877d3a09afb3838a053867a655ca30c46a1f81 kernel.org
https://git.kernel.org/stable/c/2c7912732184773dbd371a411da87af1cc080b86 kernel.org
https://git.kernel.org/stable/c/430ed49a16cf9ca249d0fb51490582090bc4848b kernel.org
https://git.kernel.org/stable/c/80cebb0e8a8d1e758f0d671f5e047279c5c3e528 kernel.org

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-89693
NVD Published Date:
Sep 11, 2026
NVD Last Modified:
Sep 21, 2026
Source:
kernel.org
CVE-2026-89693 Details - Not Deferred