{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89605", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.733Z", "datePublished": "2026-09-11T19:45:08.101Z", "dateUpdated": "2026-09-11T19:45:08.101Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-11T19:45:08.101Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\necryptfs: release message context on send failure\n\necryptfs_send_message_locked() moves a message context from the free\nlist to the allocated list before sending the request to the userspace\ndaemon.\n\nIf ecryptfs_send_miscdev() fails, the context is left on the\nallocated list and cannot be reused. Move it back to the free list on\nfailure and clear the caller's pointer."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ecryptfs/messaging.c"], "versions": [{"version": "f66e883eb6186bc43a79581b67aff7d1a69d0ff1", "lessThan": "47ce611cb13f0eefa550d5434c1afcd4217bfc3e", "status": "affected", "versionType": "git"}, {"version": "f66e883eb6186bc43a79581b67aff7d1a69d0ff1", "lessThan": "9319706316a8e79f374627554386d575a84b637f", "status": "affected", "versionType": "git"}, {"version": "f66e883eb6186bc43a79581b67aff7d1a69d0ff1", "lessThan": "654b7e79443f5ea90849f5c1cf70c0d94bd5b10e", "status": "affected", "versionType": "git"}, {"version": "f66e883eb6186bc43a79581b67aff7d1a69d0ff1", "lessThan": "219644a3ad5518217b2d62cad6d2c36a2308c949", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["fs/ecryptfs/messaging.c"], "versions": [{"version": "2.6.26", "status": "affected"}, {"version": "0", "lessThan": "2.6.26", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.109", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.50", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.26", "versionEndExcluding": "6.12.109"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.26", "versionEndExcluding": "6.18.50"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.26", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.6.26", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/47ce611cb13f0eefa550d5434c1afcd4217bfc3e"}, {"url": "https://git.kernel.org/stable/c/9319706316a8e79f374627554386d575a84b637f"}, {"url": "https://git.kernel.org/stable/c/654b7e79443f5ea90849f5c1cf70c0d94bd5b10e"}, {"url": "https://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949"}], "title": "ecryptfs: release message context on send failure", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["fs/ecryptfs/messaging.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "47ce611cb13f0eefa550d5434c1afcd4217bfc3e", "status": "affected", "version": "f66e883eb6186bc43a79581b67aff7d1a69d0ff1", "versionType": "git"}, {"lessThan": "9319706316a8e79f374627554386d575a84b637f", "status": "affected", "version": "f66e883eb6186bc43a79581b67aff7d1a69d0ff1", "versionType": "git"}, {"lessThan": "654b7e79443f5ea90849f5c1cf70c0d94bd5b10e", "status": "affected", "version": "f66e883eb6186bc43a79581b67aff7d1a69d0ff1", "versionType": "git"}, {"lessThan": "219644a3ad5518217b2d62cad6d2c36a2308c949", "status": "affected", "version": "f66e883eb6186bc43a79581b67aff7d1a69d0ff1", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["fs/ecryptfs/messaging.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "2.6.26"}, {"lessThan": "2.6.26", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.109", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.50", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\necryptfs: release message context on send failure\n\necryptfs_send_message_locked() moves a message context from the free\nlist to the allocated list before sending the request to the userspace\ndaemon.\n\nIf ecryptfs_send_miscdev() fails, the context is left on the\nallocated list and cannot be reused. Move it back to the free list on\nfailure and clear the caller's pointer."}], "id": "CVE-2026-89605", "lastModified": "2026-09-11T20:19:45.487", "metrics": {}, "published": "2026-09-11T20:19:45.487", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/47ce611cb13f0eefa550d5434c1afcd4217bfc3e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/654b7e79443f5ea90849f5c1cf70c0d94bd5b10e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/9319706316a8e79f374627554386d575a84b637f"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel ecryptfs: Denial of Service due to message context leak on send failure", "id": "2532190", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532190"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.5", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["A flaw was found in the `ecryptfs` component of the Linux kernel. When the `ecryptfs_send_miscdev()` function fails to send a message to the userspace daemon, the associated message context is not properly released. This oversight leaves the context on an allocated list, preventing its reuse. Repeated failures could lead to resource exhaustion, potentially resulting in a Denial of Service (DoS) for the system."], "name": "CVE-2026-89605", "public_date": "2026-09-11T19:45:08Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89605\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89605\nhttps://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949\nhttps://git.kernel.org/stable/c/47ce611cb13f0eefa550d5434c1afcd4217bfc3e\nhttps://git.kernel.org/stable/c/654b7e79443f5ea90849f5c1cf70c0d94bd5b10e\nhttps://git.kernel.org/stable/c/9319706316a8e79f374627554386d575a84b637f"], "threat_severity": "Moderate"}

{}