SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89605

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the eCryptfs component of the Linux kernel, where a failure in the ecryptfs_send_message_locked() function can lead to message contexts being improperly managed, resulting in resource leaks. This could potentially degrade system performance or lead to denial of service due to exhaustion of available message contexts. Linux system administrators and developers utilizing eCryptfs should prioritize addressing this issue to ensure efficient resource management and system stability.

CVE
CVE-2026-89605
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfs_send_miscdev() fails, the context is left on the allocated list and cannot be reused. Move it back to the free list on failure and clear the caller's pointer.