CVE-2026-89618

CVE-2026-89618

published September 12, 2026

CVSS
—
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

eventfs: Initialize ei->children and ei->list in init_ei()

eventfs_create_dir() allocates the eventfs_inode and initializes it with

init_ei(). But this does not initialize the eventfs_inode list_heads. If

the eventfs_create_dir() fails due to memory pressure, it will call

free_ei() before it initialized the lists, and that checks to make sure

the eventfs_inode has no children. But because the list wasn't

initialized, it will give a false warning.

Fix it by moving the list initialization into init_ei().

[ Rewrote change log ]

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00175 · 6.7th percentile
Published
2026-09-12T00:19Z
References (5)
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:45Z
    eventfs: Initialize ei->children and ei->list in init_ei()
    cvelistv5