7.8

CVE-2026-89605

ecryptfs: release message context on send failure

In the Linux kernel, the following vulnerability has been resolved:

ecryptfs: release message context on send failure

ecryptfs_send_message_locked() moves a message context from the free
list to the allocated list before sending the request to the userspace
daemon.

If ecryptfs_send_miscdev() fails, the context is left on the
allocated list and cannot be reused. Move it back to the free list on
failure and clear the caller's pointer.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version f66e883eb6186bc43a79581b67aff7d1a69d0ff1
Version < 177e0c32fec3602bb3b64139bb8bb610cd6722c7
Status affected
Version f66e883eb6186bc43a79581b67aff7d1a69d0ff1
Version < 743e7aeb9575c0838d8996d40d81a6b8fa5cd060
Status affected
Version f66e883eb6186bc43a79581b67aff7d1a69d0ff1
Version < 590fc6140e29c54d2f7839eb9df78d106ee1905e
Status affected
Version f66e883eb6186bc43a79581b67aff7d1a69d0ff1
Version < 30845ed227475a11a49ccce047837d016b7e0f49
Status affected
Version f66e883eb6186bc43a79581b67aff7d1a69d0ff1
Version < 47ce611cb13f0eefa550d5434c1afcd4217bfc3e
Status affected
Version f66e883eb6186bc43a79581b67aff7d1a69d0ff1
Version < 9319706316a8e79f374627554386d575a84b637f
Status affected
Version f66e883eb6186bc43a79581b67aff7d1a69d0ff1
Version < 654b7e79443f5ea90849f5c1cf70c0d94bd5b10e
Status affected
Version f66e883eb6186bc43a79581b67aff7d1a69d0ff1
Version < 219644a3ad5518217b2d62cad6d2c36a2308c949
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 2.6.26
Status affected
Version 0
Version < 2.6.26
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.058
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/47ce611cb13f0eefa550d5434c1afcd4217bfc3e
https://git.kernel.org/stable/c/9319706316a8e79f374627554386d575a84b637f
https://git.kernel.org/stable/c/654b7e79443f5ea90849f5c1cf70c0d94bd5b10e
https://git.kernel.org/stable/c/219644a3ad5518217b2d62cad6d2c36a2308c949
https://git.kernel.org/stable/c/177e0c32fec3602bb3b64139bb8bb610cd6722c7
https://git.kernel.org/stable/c/30845ed227475a11a49ccce047837d016b7e0f49
https://git.kernel.org/stable/c/590fc6140e29c54d2f7839eb9df78d106ee1905e
https://git.kernel.org/stable/c/743e7aeb9575c0838d8996d40d81a6b8fa5cd060