Homepage

Information Exposure The advisory has been revoked - it doesn't affect any version of package kernel-modules-internal  (opens in a new tab)

Threat Intelligence

EPSS
0.17% (7th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-CENTOS10-KERNELMODULESINTERNAL-21332346
  • published21 Oct 2026
  • disclosed11 Sept 2026
Report a new vulnerability Found a mistake?

Introduced: 11 Sep 2026

CVE-2026-89642  (opens in a new tab)
CWE-200  (opens in a new tab)

Amendment

The Centos security team deemed this advisory irrelevant for Centos:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kernel-modules-internal package and not the kernel-modules-internal package as distributed by Centos.

In the Linux kernel, the following vulnerability has been resolved:

cifs: call pagecache_isize_extended() in cifs_setsize() when extending

cifs_setsize() calls truncate_pagecache() but skips pagecache_isize_extended() on extension. truncate_setsize() shows the correct pattern:

i_size_write(inode, newsize); if (newsize > oldsize) pagecache_isize_extended(inode, oldsize, newsize); truncate_pagecache(inode, newsize);

pagecache_isize_extended() zeroes the tail of the page straddling old EOF. Without it, dirty bytes in that region can be written back to the server, exposing stale data in the newly extended range.