CVE-2026-89605

CVE-2026-89605

High · published September 12, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ecryptfs: release message context on send failure

ecryptfs_send_message_locked() moves a message context from the free

list to the allocated list before sending the request to the userspace

daemon.

If ecryptfs_send_miscdev() fails, the context is left on the

allocated list and cannot be reused. Move it back to the free list on

failure and clear the caller's pointer.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00169 · 5.9th percentile
Published
2026-09-12T00:19Z
References (8)
https://git.kernel.org/stable/c/177e0c32fec3602bb3b64139bb8bb610cd6722c7 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/30845ed227475a11a49ccce047837d016b7e0f49 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/47ce611cb13f0eefa550d5434c1afcd4217bfc3e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/590fc6140e29c54d2f7839eb9df78d106ee1905e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/654b7e79443f5ea90849f5c1cf70c0d94bd5b10e · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/743e7aeb9575c0838d8996d40d81a6b8fa5cd060 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/9319706316a8e79f374627554386d575a84b637f · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:45Z
    ecryptfs: release message context on send failure
    cvelistv5