CVE-2026-89609

CVE-2026-89609

High · published September 12, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ecryptfs: hold msg ctx list lock when cleaning daemon queue

ecryptfs_exorcise_daemon() drops queued messages from a dying daemon

without holding ecryptfs_msg_ctx_lists_mux, but

ecryptfs_msg_ctx_alloc_to_free() requires that lock.

Take the list lock while moving the queued contexts back to the free

list to avoid racing with other global msg ctx list users.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2026-09-12T00:19Z
References (8)
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:45Z
    ecryptfs: hold msg ctx list lock when cleaning daemon queue
    cvelistv5