CVE-2026-89723 Linux CVE debrief

Who should care

Linux kernel developers and maintainers, Linux distribution maintainers, and users of the nilfs2 filesystem should assess their exposure and apply the patches provided by the Linux kernel maintainers to fix the vulnerability.

Why it matters

A slab-out-of-bounds vulnerability in the Linux kernel's nilfs2 filesystem implementation can lead to denial of service or code execution. Linux kernel developers, maintainers, and users of the nilfs2 filesystem should assess their exposure and apply patches to fix the vulnerability.

• Potential slab-out-of-bounds access leading to denial of service or code execution.
• Possible exploitation attempts on systems using the nilfs2 filesystem.
• Need for patching and updating the Linux kernel to prevent exploitation.

Technical summary

The vulnerability is caused by an intermediate node block being left behind as garbage during truncation, leading to a potential slab-out-of-bounds access when the log writer invokes nilfs_direct_propagate() on it. The fix involves adding a nilfs_btree_discard() operation to delete the remaining intermediate node block. This issue affects the Linux kernel's nilfs2 filesystem implementation, and users should review and apply patches provided by the Linux kernel maintainers. The vulnerability can be mitigated by ensuring that the Linux kernel is updated to a version that includes the fix and by monitoring systems for potential exploitation attempts.

Defensive priority

Medium

Recommended defensive actions

• Review and apply the patches provided by the Linux kernel maintainers to fix the vulnerability.
• Ensure that the Linux kernel is updated to a version that includes the fix.
• Monitor systems that use the nilfs2 filesystem for potential exploitation attempts.
• Perform a thorough review of system configurations and apply compensating controls if necessary.
• Track and verify the remediation of exposed assets.
• Conduct an asset inventory to identify systems that may be affected.
• Review and update monitoring and detection configurations to account for this vulnerability.

Evidence notes

The issue is caused by an intermediate node block being left behind as garbage during truncation, which can lead to a slab-out-of-bounds access. The fix involves adding a nilfs_btree_discard() operation to delete the remaining intermediate node block.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.