CVE-2026-89605

Received Received - Intake

ecryptfs Message Context Leak on Send Failure

Publication date: 2026-09-11

Last updated on: 2026-09-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfs_send_miscdev() fails, the context is left on the allocated list and cannot be reused. Move it back to the free list on failure and clear the caller's pointer.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-14

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-09-29

NVD

CVE-2026-89605

EUVD

EUVD-2026-76517

Affected Vendors & Products

Vendor	Product	Version / Range
linux_kernel	ecryptfs	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a flaw in the ecryptfs filesystem. When sending a message to the userspace daemon, the system fails to properly release the message context if the send operation fails. This leaves the context in an allocated state, preventing it from being reused and potentially causing resource leaks or system instability.

Detection Guidance

This vulnerability is specific to the Linux kernel's ecryptfs module and may not have direct network detection methods. Check kernel logs for ecryptfs-related errors or failures using: dmesg | grep ecryptfs or journalctl -k | grep ecryptfs. If the module is loaded, verify its status with lsmod | grep ecryptfs.

Impact Analysis

The impact depends on system usage. If ecryptfs is actively used, this flaw could lead to resource exhaustion, crashes, or denial of service due to unmanaged memory or context leaks. Systems relying on ecryptfs for encryption may experience reduced performance or unexpected failures.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a local kernel memory management issue without implications for data protection or privacy controls.

Mitigation Strategies

Update the Linux kernel to the latest patched version. If ecryptfs is not in use, unload the module with rmmod ecryptfs. If in use, ensure no critical processes depend on it before updating. Monitor logs for any residual issues post-update.

Hi! I’m here to help you understand CVE-2026-89605. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70