CVE Explorer

CVE-2026-64298

In the Linux kernel, the following vulnerability has been resolved: NFSv4: include MAY_WRITE in open permission mask for O_TRUNC POSIX requires write permission to truncate a file, so an open() that specifies O_TRUNC must be authorized for write access regardless of the O_ACCMODE access mode. nfs_open_permission_mask() builds the access mask passed to nfs_may_open(), which is the local authorization gate for OPENs the client serves itself from a cached write delegation via the can_open_delega

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:c23603969fd88809ac88e00c41b8da0a062fec8120cc5645190b14d1e3708c36

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["fs/nfs/dir.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4817c8974315b666e895b7d1bb83cd3664c323b1","status":"affected","version":"af22f94ae02ab9dd4fd7fe628c8434a59cc293be","versionType":"git"},{"lessThan":"cb148a2762d644bff1894728e8835a9a4b84f9ea","status":"affected","version":"af22f94ae02ab9dd4fd7fe628c8434a59cc293be","versionType":"git"},{"lessThan":"30fdf4df6c3c00efec947e4ddf97f0fdd4473628","status":"affected","version":"af22f94ae02ab9dd4fd7fe628c8434a59…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["fs/nfs/dir.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.24"},{"lessThan":"2.6.24","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.261","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.212","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.178","versionType":"semver"},{"lessThanOrEq…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/affected/1

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"baseScore":7.1,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/22c1fd1355ad4ca27aa7f0fa02719122dd92d9de"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/references/3

{"url":"https://git.kernel.org/stable/c/30fdf4df6c3c00efec947e4ddf97f0fdd4473628"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/4817c8974315b666e895b7d1bb83cd3664c323b1"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/5140f099ecd8a2f2808b7f7b720ee1bad8468974"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/6bd7d0a06b53c4e797e1a9cea0d2d41aa1b26230"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/a937e92c1d00534b5c2e3e9f4381b7e988180797"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/cb148a2762d644bff1894728e8835a9a4b84f9ea"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/e36501b7d4abdcd6d69a7cb901b2f286b7a3d041"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a31acb8c3db3f3143cf444ad308ce4f3dbc646af229e37f12163ac9bd6dca61e · sha256:691d5803d452ce50… · /containers/cna/references/6

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer