SB2026091271 - Improper Check for Unusual or Exceptional Conditions in Linux kernel nfsd

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check for Unusual or Exceptional Conditions (CVE-ID: CVE-2026-89711)

CWE-ID: CWE-754 - Improper Check for Unusual or Exceptional Conditions

CVSSv4: 0 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a remote attacker to trigger a kernel warning.

The vulnerability exists due to an incorrect warning condition in nfsd_mode_check when processing NFS client LOOKUP requests for exported NFS filesystems that lack a lookup method. A remote attacker can issue a LOOKUP request to trigger a kernel warning.

The condition can occur when reexporting an NFS filesystem.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/7ef182a8fe9c12b0d936880b1e504840639aa009
• https://git.kernel.org/stable/c/a275de3bac5635514ca830f2e46b5ff0e66b5c4c
• https://git.kernel.org/stable/c/aa0cf48a448c5a9fe1a1e880899ecd589ce39e6e
• https://git.kernel.org/stable/c/b55b4d880bb080fa10eb08ba21a5d8679b8102fe