{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89642", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.741Z", "datePublished": "2026-09-11T19:45:34.778Z", "dateUpdated": "2026-09-11T19:45:34.778Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-11T19:45:34.778Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: call pagecache_isize_extended() in cifs_setsize() when extending\n\ncifs_setsize() calls truncate_pagecache() but skips\npagecache_isize_extended() on extension. truncate_setsize() shows\nthe correct pattern:\n\n i_size_write(inode, newsize);\n if (newsize > oldsize)\n pagecache_isize_extended(inode, oldsize, newsize);\n truncate_pagecache(inode, newsize);\n\npagecache_isize_extended() zeroes the tail of the page straddling old\nEOF. Without it, dirty bytes in that region can be written back to\nthe server, exposing stale data in the newly extended range."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/client/inode.c"], "versions": [{"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "12bafe32f09c0d24f5096154b59c347b9c6606e0", "status": "affected", "versionType": "git"}, {"version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "lessThan": "c510edb9734af1c274d18f4f31a471a166bbc7e8", "status": "affected", "versionType": "git"}, {"version": "0", "lessThan": "7.2.4", "status": "affected", "versionType": "semver"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/smb/client/inode.c"], "versions": [{"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/12bafe32f09c0d24f5096154b59c347b9c6606e0"}, {"url": "https://git.kernel.org/stable/c/c510edb9734af1c274d18f4f31a471a166bbc7e8"}], "title": "cifs: call pagecache_isize_extended() in cifs_setsize() when extending", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/smb/client/inode.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "12bafe32f09c0d24f5096154b59c347b9c6606e0", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "c510edb9734af1c274d18f4f31a471a166bbc7e8", "status": "affected", "version": "1da177e4c3f41524e886b7f1b8a0c1fc7321cac2", "versionType": "git"}, {"lessThan": "7.2.4", "status": "affected", "version": "0", "versionType": "semver"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/smb/client/inode.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncifs: call pagecache_isize_extended() in cifs_setsize() when extending\n\ncifs_setsize() calls truncate_pagecache() but skips\npagecache_isize_extended() on extension. truncate_setsize() shows\nthe correct pattern:\n\n i_size_write(inode, newsize);\n if (newsize > oldsize)\n pagecache_isize_extended(inode, oldsize, newsize);\n truncate_pagecache(inode, newsize);\n\npagecache_isize_extended() zeroes the tail of the page straddling old\nEOF. Without it, dirty bytes in that region can be written back to\nthe server, exposing stale data in the newly extended range."}], "id": "CVE-2026-89642", "lastModified": "2026-09-11T20:19:49.980", "metrics": {}, "published": "2026-09-11T20:19:49.980", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/12bafe32f09c0d24f5096154b59c347b9c6606e0"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c510edb9734af1c274d18f4f31a471a166bbc7e8"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: CIFS information disclosure via stale data exposure during file extension", "id": "2532207", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532207"}, "csaw": false, "cvss3": {"cvss3_base_score": "6.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "status": "draft"}, "cwe": "CWE-201", "details": ["A flaw was found in the Linux kernel's Common Internet File System (CIFS) implementation. When a client extends a file, the `cifs_setsize()` function fails to properly zero out the newly extended portion of the page cache. This oversight can lead to stale data from the client's memory being written back to the server, potentially exposing sensitive information to the server."], "name": "CVE-2026-89642", "public_date": "2026-09-11T19:45:34Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89642\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89642\nhttps://git.kernel.org/stable/c/12bafe32f09c0d24f5096154b59c347b9c6606e0\nhttps://git.kernel.org/stable/c/c510edb9734af1c274d18f4f31a471a166bbc7e8"], "threat_severity": "Moderate"}

{}