In the Linux kernel, the following vulnerability has been resolved:

ecryptfs: release message context on send failure

ecryptfs_send_message_locked() moves a message context from the free
list to the allocated list before sending the request to the userspace
daemon.

If ecryptfs_send_miscdev() fails, the context is left on the
allocated list and cannot be reused. Move it back to the free list on
failure and clear the caller's pointer.

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
f66e883eb6186bc43a79581b67aff7d1a69d0ff1 affected < 47ce611cb13f0eefa550d5434c1afcd4217bfc3e
f66e883eb6186bc43a79581b67aff7d1a69d0ff1 affected < 9319706316a8e79f374627554386d575a84b637f
f66e883eb6186bc43a79581b67aff7d1a69d0ff1 affected < 654b7e79443f5ea90849f5c1cf70c0d94bd5b10e
f66e883eb6186bc43a79581b67aff7d1a69d0ff1 affected < 219644a3ad5518217b2d62cad6d2c36a2308c949
Linux Linux affected
Version Status Constraints
2.6.26 affected —
0 unaffected < 2.6.26
6.12.109 unaffected ≤ 6.12.*
6.18.50 unaffected ≤ 6.18.*
7.2.4 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949 cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/47ce611cb13f0eefa550d5434c1afcd4217bfc3e cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/654b7e79443f5ea90849f5c1cf70c0d94bd5b10e cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/9319706316a8e79f374627554386d575a84b637f cve-icon cve-icon cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2026-89605 cve-icon
https://www.cve.org/CVERecord?id=CVE-2026-89605 cve-icon
History

Sat, 12 Sep 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772
References
Metrics threat_severity

None

 cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Moderate

Fri, 11 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfs_send_miscdev() fails, the context is left on the allocated list and cannot be reused. Move it back to the free list on failure and clear the caller's pointer.
Title ecryptfs: release message context on send failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-11T19:45:08.101Z

Reserved: 2026-09-11T19:38:34.733Z

Link: CVE-2026-89605

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-11T20:19:45.487

Modified: 2026-09-11T20:19:45.487

Link: CVE-2026-89605

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-11T19:45:08Z

Links: CVE-2026-89605 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-12T04:00:07Z

Weaknesses