CVE-2026-89605 (CVSS 7.8)

Description

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfs_send_miscdev() fails, the context is left on the allocated list and cannot be reused. Move it back to the free list on failure and clear the caller's pointer.

Is your site exposed to CVE-2026-89605?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

7.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0016

Probability of exploitation

0.06%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/177e0c32fec3602bb3b64139bb8bb610cd6722c7 https://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949 https://git.kernel.org/stable/c/30845ed227475a11a49ccce047837d016b7e0f49 https://git.kernel.org/stable/c/47ce611cb13f0eefa550d5434c1afcd4217bfc3e https://git.kernel.org/stable/c/590fc6140e29c54d2f7839eb9df78d106ee1905e https://git.kernel.org/stable/c/654b7e79443f5ea90849f5c1cf70c0d94bd5b10e https://git.kernel.org/stable/c/743e7aeb9575c0838d8996d40d81a6b8fa5cd060 https://git.kernel.org/stable/c/9319706316a8e79f374627554386d575a84b637f

Frequently Asked Questions

What is CVE-2026-89605? +

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_message_locked() moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfs_send_miscdev() fails, the context is left on the allocated list and cannot be reused. Move it back to the free list on failure and clear the caller's pointer. It has a CVSS v3.1 base score of 7.8 (HIGH).

How severe is CVE-2026-89605? +

CVE-2026-89605 has a CVSS v3.1 score of 7.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0016, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-89605? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-89605