CVE-2026-89639

CVE-2026-89639 affects the Linux kernel CIFS client . The root cause is that cifs_do_truncate() is invoked from cifs_open() without holding i_rwsem, preventing it from using cifs_resize_file_locked() to perform a proper fscache cookie resize . This means that when a file is opened with O_TRUNC (t...