CVE-2026-89608

🗓️ 11 Sep 2026 19:45:10Reported by LinuxType

Linux kernel ecryptfs miscalculates packet buffer size for v1 headers, risking over-read.

Reporter	Title	Published	Views	Family All 19
Cvelist	CVE-2026-89608 ecryptfs: pass packet set buffer size to parser	11 Sep 202619:45	–	cvelist
Debian	[SECURITY] [DSA 6528-1] linux security update	29 Sep 202609:49	–	debian
Debian CVE	CVE-2026-89608	11 Sep 202619:45	–	debiancve
Tenable Nessus	Debian dsa-6528 : ata-modules-6.12.111+deb13-armmp-di - security update	29 Sep 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2026-89608	12 Sep 202600:00	–	nessus
EUVD	EUVD-2026-76520	11 Sep 202619:45	–	euvd
NVD	CVE-2026-89608	11 Sep 202620:19	–	nvd
OSV	AZL-100184 CVE-2026-89608 affecting package kernel 6.6.150.1-1	11 Sep 202620:19	–	osv
OSV	BELL-CVE-2026-89608	15 Sep 202606:05	–	osv
OSV	DEBIAN-CVE-2026-89608	11 Sep 202620:19	–	osv

Vulners

CNA

Node

linux linux_kernelRange2.6.19–5.10.270

linux linux_kernelRange5.11.0–5.15.221

linux linux_kernelRange5.16.0–6.1.188

linux linux_kernelRange6.2.0–6.6.157

linux linux_kernelRange6.7.0–6.12.109

linux linux_kernelRange6.13.0–6.18.50

linux linux_kernelRange6.19.0–7.2.4

linux linux_kernelRange7.3.0–7.3-rc1

[
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "unaffected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ecryptfs/crypto.c",
      "fs/ecryptfs/ecryptfs_kernel.h",
      "fs/ecryptfs/keystore.c"
    ],
    "versions": [
      {
        "version": "237fead619984cc48818fe12ee0ceada3f55b012",
        "lessThan": "e7573b0e3058c6bbdfe81673f22c09900fde9e65",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "237fead619984cc48818fe12ee0ceada3f55b012",
        "lessThan": "66a87559ecb26afe80ad512faf728a158e2b81da",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "237fead619984cc48818fe12ee0ceada3f55b012",
        "lessThan": "3bd9bb3e167a7c14a50423f6ff03ee0fb007199d",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "237fead619984cc48818fe12ee0ceada3f55b012",
        "lessThan": "749fa08d8f1b318bd8f4669a14a8a4a8c1bbdaac",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "237fead619984cc48818fe12ee0ceada3f55b012",
        "lessThan": "329de8b9e988b152b938f09224670d97bada0b96",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "237fead619984cc48818fe12ee0ceada3f55b012",
        "lessThan": "e5d254e654f2311a3c4b9c791d7f216554bcd17a",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "237fead619984cc48818fe12ee0ceada3f55b012",
        "lessThan": "747fd45be396a6aea3420ab657a0ab4e60185b05",
        "status": "affected",
        "versionType": "git"
      },
      {
        "version": "237fead619984cc48818fe12ee0ceada3f55b012",
        "lessThan": "2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2",
        "status": "affected",
        "versionType": "git"
      }
    ]
  },
  {
    "product": "Linux",
    "vendor": "Linux",
    "defaultStatus": "affected",
    "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
    "programFiles": [
      "fs/ecryptfs/crypto.c",
      "fs/ecryptfs/ecryptfs_kernel.h",
      "fs/ecryptfs/keystore.c"
    ],
    "versions": [
      {
        "version": "2.6.19",
        "status": "affected"
      },
      {
        "version": "0",
        "lessThan": "2.6.19",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.10.270",
        "lessThanOrEqual": "5.10.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "5.15.221",
        "lessThanOrEqual": "5.15.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.1.188",
        "lessThanOrEqual": "6.1.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.6.157",
        "lessThanOrEqual": "6.6.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.12.109",
        "lessThanOrEqual": "6.12.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "6.18.50",
        "lessThanOrEqual": "6.18.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.2.4",
        "lessThanOrEqual": "7.2.*",
        "status": "unaffected",
        "versionType": "semver"
      },
      {
        "version": "7.3-rc1",
        "lessThanOrEqual": "*",
        "status": "unaffected",
        "versionType": "original_commit_for_fix"
      }
    ]
  }
]

Source	Link
git	www.git.kernel.org/stable/c/747fd45be396a6aea3420ab657a0ab4e60185b05
git	www.git.kernel.org/stable/c/e7573b0e3058c6bbdfe81673f22c09900fde9e65
git	www.git.kernel.org/stable/c/2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2
git	www.git.kernel.org/stable/c/e5d254e654f2311a3c4b9c791d7f216554bcd17a
git	www.git.kernel.org/stable/c/66a87559ecb26afe80ad512faf728a158e2b81da
git	www.git.kernel.org/stable/c/329de8b9e988b152b938f09224670d97bada0b96
git	www.git.kernel.org/stable/c/749fa08d8f1b318bd8f4669a14a8a4a8c1bbdaac
git	www.git.kernel.org/stable/c/3bd9bb3e167a7c14a50423f6ff03ee0fb007199d

14 Sep 2026 13:19Current

5.9Medium risk

Vulners AI Score5.9

CVSS 3.17.1

EPSS0.00167