GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-89711 (GCVE-0-2026-89711)

Vulnerability from cvelistv5 – Published: 2026-09-11 19:46 – Updated: 2026-09-14 12:02
VLAI
Title
NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check
Summary
In the Linux kernel, the following vulnerability has been resolved: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check The header for commit e75b23f9e323 ("nfsd: check d_can_lookup in fh_verify of directories") details the assumption that justified adding the WARN_ON_ONCE to nfsd_mode_check(), that assumption is invalid (in the case of NFS reexport). When NFSD exports an NFS filesystem it is very possible for nfsd_mode_check() to encounter a @dentry that doesn't have i_op->lookup (see nfs_fhget()'s NFS_ATTR_FATTR_MOUNTPOINT and NFS_ATTR_FATTR_V4_REFERRAL handling, and d_flags_for_inode()). So remove nfsd_mode_check()'s WARN_ON_ONCE(). The nfserr_notdir return on that branch must stay. It guards the subsequent lookup_one_unlocked() -> __lookup_slow() path, which calls inode->i_op->lookup() with no NULL check, so returning nfserr_notdir is what keeps a client LOOKUP into such a @dentry from dereferencing a NULL method pointer.
Severity
8.2 (High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c , < ae251937c6f0237e5b555a5e4ba4595b8206e865 (git)
Affected: e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c , < e145e8d67a5d41c72d322e7f87ab474d39d9dfb7 (git)
Affected: e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c , < 9f4434893a2783f7384d993cea883aff3fb7a52d (git)
Affected: e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c , < 2ef131323999539038e306773c8256403834361b (git)
Affected: e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c , < b55b4d880bb080fa10eb08ba21a5d8679b8102fe (git)
Affected: e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c , < 7ef182a8fe9c12b0d936880b1e504840639aa009 (git)
Affected: e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c , < a275de3bac5635514ca830f2e46b5ff0e66b5c4c (git)
Affected: e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c , < aa0cf48a448c5a9fe1a1e880899ecd589ce39e6e (git)
guessed Create a notification for this product.
Linux Linux Affected: 4.8
Unaffected: 0 , < 4.8 (semver)
Unaffected: 5.10.270 , ≤ 5.10.* (semver)
Unaffected: 5.15.221 , ≤ 5.15.* (semver)
Unaffected: 6.1.188 , ≤ 6.1.* (semver)
Unaffected: 6.6.157 , ≤ 6.6.* (semver)
Unaffected: 6.12.109 , ≤ 6.12.* (semver)
Unaffected: 6.18.50 , ≤ 6.18.* (semver)
Unaffected: 7.2.4 , ≤ 7.2.* (semver)
Unaffected: 7.3-rc1 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "fs/nfsd/nfsfh.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "ae251937c6f0237e5b555a5e4ba4595b8206e865",
              "status": "affected",
              "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
              "versionType": "git"
            },
            {
              "lessThan": "e145e8d67a5d41c72d322e7f87ab474d39d9dfb7",
              "status": "affected",
              "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
              "versionType": "git"
            },
            {
              "lessThan": "9f4434893a2783f7384d993cea883aff3fb7a52d",
              "status": "affected",
              "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
              "versionType": "git"
            },
            {
              "lessThan": "2ef131323999539038e306773c8256403834361b",
              "status": "affected",
              "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
              "versionType": "git"
            },
            {
              "lessThan": "b55b4d880bb080fa10eb08ba21a5d8679b8102fe",
              "status": "affected",
              "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
              "versionType": "git"
            },
            {
              "lessThan": "7ef182a8fe9c12b0d936880b1e504840639aa009",
              "status": "affected",
              "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
              "versionType": "git"
            },
            {
              "lessThan": "a275de3bac5635514ca830f2e46b5ff0e66b5c4c",
              "status": "affected",
              "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
              "versionType": "git"
            },
            {
              "lessThan": "aa0cf48a448c5a9fe1a1e880899ecd589ce39e6e",
              "status": "affected",
              "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "fs/nfsd/nfsfh.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "4.8"
            },
            {
              "lessThan": "4.8",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.109",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.50",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.4",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3-rc1",
                  "versionStartIncluding": "4.8",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check\n\nThe header for commit e75b23f9e323 (\"nfsd: check d_can_lookup in\nfh_verify of directories\") details the assumption that justified\nadding the WARN_ON_ONCE to nfsd_mode_check(), that assumption is\ninvalid (in the case of NFS reexport).\n\nWhen NFSD exports an NFS filesystem it is very possible for\nnfsd_mode_check() to encounter a @dentry that doesn\u0027t have\ni_op-\u003elookup (see nfs_fhget()\u0027s NFS_ATTR_FATTR_MOUNTPOINT and\nNFS_ATTR_FATTR_V4_REFERRAL handling, and d_flags_for_inode()).\n\nSo remove nfsd_mode_check()\u0027s WARN_ON_ONCE(). The nfserr_notdir\nreturn on that branch must stay. It guards the subsequent\nlookup_one_unlocked() -\u003e __lookup_slow() path, which calls\ninode-\u003ei_op-\u003elookup() with no NULL check, so returning nfserr_notdir\nis what keeps a client LOOKUP into such a @dentry from dereferencing\na NULL method pointer."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:N - nfsd is the in-kernel NFS server. A remote client reaches nfsd_mode_check() via directory ops (LOOKUP, CREATE, OPEN) over TCP/UDP 2049: svc_recv to nfsd_dispatch to fh_verify to __fh_verify.\nAC:L - On an nfsd host that reexports NFS, mountpoint and NFSv4 referral dentries lack i_op-\u003elookup so d_can_lookup() is false. A client LOOKUP or other S_IFDIR fh_verify on that filehandle hits WARN_ON_ONCE deterministically with no race.\nPR:N - nfsd_mode_check() runs in __fh_verify() after filehandle decode but before check_security_flavor() and nfsd_permission(). Typical nfsd deployments accept AUTH_SYS/AUTH_NULL, so an unauthenticated peer that can reach the export triggers it with self-asserted credentials.\nUI:N - The attacker sends the NFS RPCs (NFSv4 PUTFH plus LOOKUP, or NFSv3 LOOKUP) themselves. No victim user must mount a filesystem, open a file, or otherwise interact.\nS:U - The WARN_ON_ONCE splat and any panic_on_warn crash remain inside the NFS server kernel. This is not a VM escape, IOMMU bypass, or sandbox boundary crossing.\nC:L - WARN_ON_ONCE calls __warn()/dump_stack(), disclosing kernel text addresses in dmesg. There is no use-after-free or out-of-bounds read; the path returns nfserr_notdir without copying kernel memory to the client.\nI:N - The fix only removes the warning. The existing nfserr_notdir return already blocks lookup_one_unlocked() from calling a NULL i_op-\u003elookup, so there is no memory corruption, write primitive, or control-flow hijack.\nA:H - WARN_ON_ONCE taints the kernel and panics the host when panic_on_warn is enabled or warn_limit is exceeded, so a remote NFS client can deny service by operating on a reexported mountpoint or referral directory."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-14T12:02:10.683Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/ae251937c6f0237e5b555a5e4ba4595b8206e865"
        },
        {
          "url": "https://git.kernel.org/stable/c/e145e8d67a5d41c72d322e7f87ab474d39d9dfb7"
        },
        {
          "url": "https://git.kernel.org/stable/c/9f4434893a2783f7384d993cea883aff3fb7a52d"
        },
        {
          "url": "https://git.kernel.org/stable/c/2ef131323999539038e306773c8256403834361b"
        },
        {
          "url": "https://git.kernel.org/stable/c/b55b4d880bb080fa10eb08ba21a5d8679b8102fe"
        },
        {
          "url": "https://git.kernel.org/stable/c/7ef182a8fe9c12b0d936880b1e504840639aa009"
        },
        {
          "url": "https://git.kernel.org/stable/c/a275de3bac5635514ca830f2e46b5ff0e66b5c4c"
        },
        {
          "url": "https://git.kernel.org/stable/c/aa0cf48a448c5a9fe1a1e880899ecd589ce39e6e"
        }
      ],
      "title": "NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-89711",
    "datePublished": "2026-09-11T19:46:26.269Z",
    "dateReserved": "2026-09-11T19:38:34.751Z",
    "dateUpdated": "2026-09-14T12:02:10.683Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-89711",
      "date": "2026-09-17",
      "epss": "0.00449",
      "percentile": "0.38226"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "fs/nfsd/nfsfh.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "ae251937c6f0237e5b555a5e4ba4595b8206e865",
                    "status": "affected",
                    "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "e145e8d67a5d41c72d322e7f87ab474d39d9dfb7",
                    "status": "affected",
                    "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "9f4434893a2783f7384d993cea883aff3fb7a52d",
                    "status": "affected",
                    "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "2ef131323999539038e306773c8256403834361b",
                    "status": "affected",
                    "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "b55b4d880bb080fa10eb08ba21a5d8679b8102fe",
                    "status": "affected",
                    "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "7ef182a8fe9c12b0d936880b1e504840639aa009",
                    "status": "affected",
                    "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "a275de3bac5635514ca830f2e46b5ff0e66b5c4c",
                    "status": "affected",
                    "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "aa0cf48a448c5a9fe1a1e880899ecd589ce39e6e",
                    "status": "affected",
                    "version": "e75b23f9e323b1e0759619c39d5a9f7a3a5d9d2c",
                    "versionType": "git"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "fs/nfsd/nfsfh.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "4.8"
                  },
                  {
                    "lessThan": "4.8",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.10.*",
                    "status": "unaffected",
                    "version": "5.10.270",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "5.15.*",
                    "status": "unaffected",
                    "version": "5.15.221",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.1.*",
                    "status": "unaffected",
                    "version": "6.1.188",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.6.*",
                    "status": "unaffected",
                    "version": "6.6.157",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.109",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.50",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "7.2.*",
                    "status": "unaffected",
                    "version": "7.2.4",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.3-rc1",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check\n\nThe header for commit e75b23f9e323 (\"nfsd: check d_can_lookup in\nfh_verify of directories\") details the assumption that justified\nadding the WARN_ON_ONCE to nfsd_mode_check(), that assumption is\ninvalid (in the case of NFS reexport).\n\nWhen NFSD exports an NFS filesystem it is very possible for\nnfsd_mode_check() to encounter a @dentry that doesn\u0027t have\ni_op-\u003elookup (see nfs_fhget()\u0027s NFS_ATTR_FATTR_MOUNTPOINT and\nNFS_ATTR_FATTR_V4_REFERRAL handling, and d_flags_for_inode()).\n\nSo remove nfsd_mode_check()\u0027s WARN_ON_ONCE(). The nfserr_notdir\nreturn on that branch must stay. It guards the subsequent\nlookup_one_unlocked() -\u003e __lookup_slow() path, which calls\ninode-\u003ei_op-\u003elookup() with no NULL check, so returning nfserr_notdir\nis what keeps a client LOOKUP into such a @dentry from dereferencing\na NULL method pointer."
          }
        ],
        "id": "CVE-2026-89711",
        "lastModified": "2026-09-14T13:19:20.930",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 8.2,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 4.2,
              "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
              "type": "Secondary"
            }
          ]
        },
        "published": "2026-09-11T20:19:58.500",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/2ef131323999539038e306773c8256403834361b"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/7ef182a8fe9c12b0d936880b1e504840639aa009"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/9f4434893a2783f7384d993cea883aff3fb7a52d"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/a275de3bac5635514ca830f2e46b5ff0e66b5c4c"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/aa0cf48a448c5a9fe1a1e880899ecd589ce39e6e"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/ae251937c6f0237e5b555a5e4ba4595b8206e865"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/b55b4d880bb080fa10eb08ba21a5d8679b8102fe"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/e145e8d67a5d41c72d322e7f87ab474d39d9dfb7"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "redhat_vex": {
      "aggregate_severity": "Moderate",
      "current_release_date": "2026-09-14T07:38:00+00:00",
      "cve": "CVE-2026-89711",
      "id": "CVE-2026-89711",
      "initial_release_date": "2026-09-11T00:00:00+00:00",
      "product_status:known_affected": "248",
      "product_status:known_not_affected": "28",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: NFSD: remove flawed WARN_ON_ONCE from nfsd_mode_check",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89711.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "moderate",
      "current_release_date": "2026-09-18T00:23:35Z",
      "cve": "CVE-2026-89711",
      "id": "CVE-2026-89711",
      "initial_release_date": "2026-09-18T00:23:35Z",
      "product_status:known_affected": "347",
      "product_status:known_not_affected": "6",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-89711",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-89711.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.