{
  "cveId": "CVE-2026-89642",
  "url": "https://patchblox.com/security/cve/CVE-2026-89642",
  "summary": "CVE-2026-89642 is fixed in linux on 1 platform, first by DEBIAN-CVE-2026-89642, released September 23, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "cifs: call pagecache_isize_extended() in cifs_setsize() when extending",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  cifs: call pagecache_isize_extended() in cifs_setsize() when extending  cifs_setsize() calls truncate_pagecache() but skips pagecache_isize_extended() on extension.  truncate_setsize() shows the correct pattern:    i_size_write(inode, newsize);   if (newsize \u003E oldsize)       pagecache_isize_extended(inode, oldsize, newsize);   truncate_pagecache(inode, newsize);  pagecache_isize_extended() zeroes the tail of the page straddling old EOF.  Without it, dirty bytes in that region can be written back to the server, exposing stale data in the newly extended range.",
  "published": "2026-09-11T20:19:49Z",
  "severity": "Moderate",
  "cvss": 4.7,
  "epss": 0.00173,
  "epssPercentile": 0.06788,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-89642",
  "fixes": [
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 13.5 (trixie)",
      "fixedVersion": "6.12.115-2",
      "fix": "DEBIAN-CVE-2026-89642",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89642",
      "released": "2026-09-23T19:19:02Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-89642",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-89642",
      "released": "2026-09-23T19:19:02Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T01:18:40Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}