SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89609

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the eCryptfs subsystem in the Linux kernel, where improper locking during the cleanup of queued messages from a dying daemon can lead to race conditions. This could potentially allow for unexpected behavior or data corruption in systems utilizing eCryptfs for encrypted file storage. Linux system administrators and developers using eCryptfs should prioritize applying the relevant patches to mitigate any risks associated with this issue.

CVE
CVE-2026-89609
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs_exorcise_daemon() drops queued messages from a dying daemon without holding ecryptfs_msg_ctx_lists_mux, but ecryptfs_msg_ctx_alloc_to_free() requires that lock. Take the list lock while moving the queued contexts back to the free list to avoid racing with other global msg ctx list users.