CVE-2026-89485
A critical vulnerability in the Linux kernel’s lockd file traversal could allow an attacker to cause a use‑after‑free, potentially leading to arbitrary code execution. The flaw occurs when iterating over files in a hash bucket, where a concurrent release can free a file that the iterator later dereferences. The issue has been fixed in the kernel.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel, all versions prior to the patch that contains the fix.
Real-world impact
An attacker could exploit the use‑after‑free to execute arbitrary code with kernel privileges, potentially taking full control of the affected system.
Why this severity
The CVSS score of 9.8 reflects the vulnerability’s high impact on confidentiality, integrity, and availability, and the fact that it can be exploited remotely with no authentication or user interaction.
What to do about it
- 01Upgrade your Linux kernel to a version that includes the fix.
- 02Reboot the system to load the updated kernel.
NVD description indicates the issue has been resolved.
Timeline
- Sep 11, 2026 · 2d agoPublishedDisclosed and added to the National Vulnerability Database.
- Sep 13, 2026 · 8h agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.