Get real-time updates on Telegram
CVE-2026-89674: Linux 4.8
CVE-2026-89674. CVSS 3.1 base score 9.8 (CRITICAL, Source advisory). EPSS 0.00514 (percentile 0.42525), scored 17-Oct-2026.
Affected technology
Linux · 9b9960a0ca4773e21c4b153ed355583946346b25 to before 3a7fd224df0fbb42167eb1b77be45d72fe0b1098, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 29e4478e2ed5a227e8f0c33cacb91bf227cedd47, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 65a72b721943618eeb3a41c8b36e915591f3f83f, 9b9960a0ca4773e21c4b153ed355583946346b25 to before bee826c00ac900473f91306f1f3e5a5a81fd4a74, 9b9960a0ca4773e21c4b153ed355583946346b25 to before e7d9d23ecd9172f05b09bb678ff22db8e361c428, 9b9960a0ca4773e21c4b153ed355583946346b25 to before 0380129b1373c437eb35401a174671c8888f4b80, 9b9960a0ca4773e21c4b153ed355583946346b25 to before c81cef6a805dec266c10fc4f83c93d6fcf1a2b43, 9b9960a0ca4773e21c4b153ed355583946346b25 to before f9868174af49d207fbaf0c5e055d088a983684af
Linux
Linux · 4.8
Linux
Component: Not specified by the source
Function: writes
File: fs/nfsd/flexfilelayoutxdr.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 39.3 /100 (P4)
- CVSS 3.1
- 9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00514 · percentile 0.42525 · 2026-10-17
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-19 10:33:46.008150+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-89674.html