In the Linux kernel, the following vulnerability has been resolved:
cifs: call pagecache_isize_extended() in cifs_setsize() when extending
cifs_setsize() calls truncate_pagecache() but skips
pagecache_isize_extended() on extension. truncate_setsize() shows
the correct pattern:
i_size_write(inode, newsize);
if (newsize > oldsize)
pagecache_isize_extended(inode, oldsize, newsize);
truncate_pagecache(inode, newsize);
pagecache_isize_extended() zeroes the tail of the page straddling old
EOF. Without it, dirty bytes in that region can be written back to
the server, exposing stale data in the newly extended range.
CVE-2026-89642
NONE
EPSS 0.20%
Updated Sep 13, 2026
Linux
CVE Details
CVE ID
CVE-2026-89642
Published Date
Sep 11, 2026
Vendor
Linux
Severity
NONE
Exploit Prediction (EPSS)
Probability of Exploit
0.20%
Likelihood of exploitation in next 30 days
Percentile:
8.7th percentile (higher than 8.7% of all CVEs)
Standard patching cycle
Impact
Minimal impact
Source
View Advisory