← All Advisories
Reported from OT-Advisories.com as of

CVE-2026-89605

Last refreshed2026-10-19

Status: UPDATED  |  Advisory ID: CVE-2026-89605

Key Details

CVECVE-2026-89605
CVSS Score / Version
7.8 (High) / CVSS v3.1
Updated2026-10-19
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS Prose
attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products
Linux Kernel

Affected Products, Subsystems & Sectors

VendorProductAffected VersionsPatch Status
LinuxLinux Kernel
SubsystemsOT Supporting Infrastructure
SectorsAll Sectors

What to Know

In the Linux kernel, the following vulnerability has been resolved:

ecryptfs: release message context on send failure

ecryptfs_send_message_locked() moves a message context from the free

list to the allocated list before sending the request to the userspace

daemon.

If ecryptfs_send_miscdev() fails, the context is left on the

allocated list and cannot be reused. Move it back to the free list on

failure and clear the caller's pointer. (NVD)

What to Do

Monitor Linux's web page for any future patch releases.

References

SourceReference
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-89605
CVEhttps://www.cve.org/CVERecord?id=CVE-2026-89605

About

OT-Advisories  ·  CVE  ·  NVD  ·  CVSS  ·  KEV  ·  EPSS  ·  CWE
Report compilation © 2026 OT-Advisories.com  ·  CC BY 4.0  ·  Source materials remain the property of their respective publishers as cited.