High 7.8Published Sep 11, 2026

CVE-2026-89605ecryptfs: release message context on send failure

Updated under an hour ago (Oct 26, 2026, 8:30 PM ET)

Does this affect you?

It affects Linux. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfs_send_miscdev() fails, the context is left on the allocated list and cannot be reused. Move it back to the free list on failure and clear the caller's pointer.

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Received
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f66e883eb6186bc43a79581b67aff7d1a69d0ff1 before 177e0c32fec3602bb3b64139bb8bb610cd6722c7; from f66e883eb6186bc43a79581b67aff7d1a69d0ff1 before 743e7aeb9575c0838d8996d40d81a6b8fa5cd060; from f66e883eb6186bc43a79581b67aff7d1a69d0ff1 before 590fc6140e29c54d2f7839eb9df78d106ee1905e; from f66e883eb6186bc43a79581b67aff7d1a69d0ff1 before 30845ed227475a11a49ccce047837d016b7e0f49; from f66e883eb6186bc43a79581b67aff7d1a69d0ff1 before 47ce611cb13f0eefa550d5434c1afcd4217bfc3e; from f66e883eb6186bc43a79581b67aff7d1a69d0ff1 before 9319706316a8e79f374627554386d575a84b637f; from f66e883eb6186bc43a79581b67aff7d1a69d0ff1 before 654b7e79443f5ea90849f5c1cf70c0d94bd5b10e; from f66e883eb6186bc43a79581b67aff7d1a69d0ff1 before 219644a3ad5518217b2d62cad6d2c36a2308c949	CNA record

References

References

https://git.kernel.org/stable/c/177e0c32fec3602bb3b64139bb8bb610cd6722c7
https://git.kernel.org/stable/c/743e7aeb9575c0838d8996d40d81a6b8fa5cd060
https://git.kernel.org/stable/c/590fc6140e29c54d2f7839eb9df78d106ee1905e
https://git.kernel.org/stable/c/30845ed227475a11a49ccce047837d016b7e0f49
https://git.kernel.org/stable/c/47ce611cb13f0eefa550d5434c1afcd4217bfc3e
https://git.kernel.org/stable/c/9319706316a8e79f374627554386d575a84b637f
https://git.kernel.org/stable/c/654b7e79443f5ea90849f5c1cf70c0d94bd5b10e
https://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.