CVE-2026-89672

CVE-2026-89672 affects the Linux kernel 's NFSd component, specifically the NFSACL v2 SETACL path. The function nfsacld_proc_setacl() unconditionally passes both the access and default ACL pointers to set_posix_acl(). When a mask bit is unset, the corresponding pointer remains NULL, which the VFS...

PT-2026-90388

In the Linux kernel, the following vulnerability has been resolved: nfsd: gate nfs2 setacl by argp-mask The NFSACL v2 SETACL path shares the decoder convention used by its v3 sibling: nfsaclsvc decode setaclargs fills in argp-acl access only when NFS ACL is set in the request mask and argp-acl...