Get real-time updates on Telegram
CVE-2026-89639: Linux 7.2
CVE-2026-89639. CVSS 3.1 base score 7.1 (HIGH, Source advisory). EPSS 0.0017 (percentile 0.05894), scored 17-Oct-2026.
Affected technology
Linux · efbcecdecefc26fa062c0e8210533ccad7d6bd4a to before 8b9b10fe5b8b492b27b9f4546742ea541a650213, fa724e235cfdb0fb0bb427d0f9dfe864ae27403e to before 81fc3868a7f726980ff845c1d0d271051e5f0f45, fa724e235cfdb0fb0bb427d0f9dfe864ae27403e to before 364b183230586a62660a7280c1eb20138338eeb5, 6838bcac954487cc0a3c8a4ee1b3a3a30e244dc9, 75640976cf474eb41682a13f2dbe9534ac26ca50, 3513f3931c579ba2a715784c6dedc59e0d9282ee, 6.18.44 to before 6.18.50, 6.12.105 to before 6.13, 7.1.8 to before 7.2
Linux
Linux · 7.2
Linux
Component: Not specified by the source
File: fs/smb/client/file.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and integrity impact as high; availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 28.4 /100 (P4)
- CVSS 3.1
- 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · Source advisory
- EPSS
- 0.0017 · percentile 0.05894 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89639.html