Details
- Type
- Use After Free
- Impact
- Use After Free, Denial Of Service
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Published
- 11 September 2026
- Updated
- 15 October 2026
CVE-2026-89677 Linux Kernel - Use After Free
Linux kernel contains a use-after-free vulnerability in nfsd4_create_file caused by improper handling of dentry in fh_compose, letting attackers cause memory corruption, exploit requires NFS exported filesystem with specific filehandle conditions.
CVSS base score
9.8
/10
Critical- CISA KEV
- Not listed
- Public exploit
- None known
- EPSS
- 0.55% chance of exploitation in 30 days