CVE-2026-89600

In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotifyprecontent builds its filerange on the triggering task's stack. fanotifyallocpermevent saves a pointer to range.pos in the heap-allocated permission event so...

CVE-2026-89600

CVE-2026-89600 is a use-after-free in the Linux kernel's fanotify subsystem. The function fsnotify_pre_content() builds a file_range on the triggering task's stack, and fanotify_alloc_perm_event() saves a pointer to range.pos inside the heap-allocated permission event. If a signal interrupts the ...