CVE-2026-89687

CVE-2026-89687 affects the nfsd subsystem of the Linux kernel . The root cause is that dentry_create() can return a file that has not actually been opened, because ->atomic_open is permitted to succeed via finish_no_open() without opening the file. The function nfsd_file_do_acquire() did not v...