{"id":21458,"date":"2026-09-12T04:31:12","date_gmt":"2026-09-11T20:31:12","guid":{"rendered":"https:\/\/www.54iter.cn\/?vuln=cve-2026-89536"},"modified":"2026-09-12T04:31:12","modified_gmt":"2026-09-11T20:31:12","slug":"cve-2026-89536","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-89536","title":{"rendered":"CVE-2026-89536 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nSUNRPC: wait for in-f"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>SUNRPC: wait for in-flight client TLS handshake callback<\/p>\n<p>xs_tls_handshake_sync() gives xs_tls_handshake_done() a reference to the<br \/>\nlower transport before submitting the handshake request. On timeout or<br \/>\nsignal, the synchronous waiter drops that reference after calling<br \/>\ntls_handshake_cancel().<\/p>\n<p>handshake_req_cancel() returns false when handshake_complete() has<br \/>\nalready marked the request complete. In that case the completion callback<br \/>\ncan still be running, so dropping the callback-owned reference in the<br \/>\nwaiter can free the lower transport before xs_tls_handshake_done() stores<br \/>\nxprt_err or drops its own reference.<\/p>\n<p>If cancellation loses to completion, wait until xs_tls_handshake_done()<br \/>\nsignals handshake_done and let the callback release its reference. This<br \/>\nmirrors the server-side handshake lifetime handling and keeps the timeout<br \/>\nor signal return value unchanged.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>SUNRPC: wait for in-flight client TLS handshake callback<\/p>\n<p>xs_tls_handshake_sync() gives xs_tls_handshake_done() a reference to the<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-21458","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/21458","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=21458"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=21458"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=21458"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}