CVE-2026-89687

CVE-2026-89687 affects the nfsd (Network File System Daemon) subsystem of the Linux kernel . The root cause is that the ->atomic_open operation is permitted to return success without actually opening the file (via finish_no_open()), which means dentry_create() can return a file that has not be...