CVE-2026-89544: Linux 6.9

Affected technology

Linux · 3cfcfc102a5e57b021b786a755a38935e357797d to before fb30241f7ccace372ee83017891549f23a715581, 3cfcfc102a5e57b021b786a755a38935e357797d to before 3ff45361e9469e85c0f86b8e7b82c63e50bab8ef, 3cfcfc102a5e57b021b786a755a38935e357797d to before f85a83774d7f4e2ac71c0c384df0dfb6f7d0179a, 3cfcfc102a5e57b021b786a755a38935e357797d to before 5e9a94539b1ec17a89177d952badfd0d844d694a, b97c37978ca825557d331c9012e0c1ddc0e42364, bfa9d86d39a0fe4685f90c3529aa9bd62a9d97a8, bb336cd8d5ecb69c430ebe3e7bcff68471d93fa8, dd292e884c649f9b1c18af0ec75ca90b390cd044, 934212a623cbab851848b6de377eb476718c3e4c, 5e6013ae2c8d420faea553d363935f65badd32c3, 9806c2393cd2ab0a8e7bb9ffae02ce20e3112ec4, 996997d1fb2126feda550d6adcedcbd94911fc69, 4.19.311 to before 4.20, 5.4.273 to before 5.5, 5.10.214 to before 5.11, 5.15.153 to before 5.16, 6.1.83 to before 6.2, 6.6.23 to before 6.7, 6.7.11 to before 6.8, 6.8.2 to before 6.9
Linux

Linux · 6.9
Linux

Component: Not specified by the source
File: net/sunrpc/auth_gss/gss_rpc_xdr.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.