CVE-2026-89606 ecryptfs: reject too-small tag 70 packets

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed...

CVE-2026-89605

CVE-2026-89605 affects the ecryptfs component of the Linux kernel . The root cause is that ecryptfs_send_message_locked() moves a message context to the allocated list before sending a request to the userspace daemon, but if ecryptfs_send_miscdev() fails, the context is never returned to the free...

EUVD-2026-76517

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfssendmessagelocked moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfssendmiscdev fails, the...

CVE-2026-89605 ecryptfs: release message context on send failure

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfssendmessagelocked moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfssendmiscdev fails, the...

PT-2026-96595

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encrypted key size in parse tag 3 packet parse tag 3 packet set encrypted key size from the Tag 3 packet body without bounding it against ECRYPTFS MAX KEY BYTES 64. When encrypted key size 64, decrypt...

PT-2026-96369

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfs parse packet set receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGE SIZE - 8. For version 1 headers the packet set starts...

PT-2026-96554

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfs exorcise daemon drops queued messages from a dying daemon without holding ecryptfs msg ctx lists mux, but ecryptfs msg ctx alloc to free requires that lock. Tak...

PT-2026-96596

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs send message locked moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfs send miscdev fails, t...

CVE-2026-89609: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: hold msg ctx list lock when cleaning daemon queue ecryptfsexorcisedaemon drops queued messages from a dying daemon without holding ecryptfsmsgctxlistsmux, but ecryptfsmsgctxalloctofree requires that lock. Take the list...

CVE-2026-89608: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...

CVE-2026-89606: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed...

PT-2026-90322

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs module where the ecryptfs parse tag 70 packet function subtracts fixed metadata fields from the parsed packet body size to determine the encrypted filenam...

PT-2026-90323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs component where the parse tag 3 packet function fails to properly bound the encrypted key size variable against the ECRYPTFS MAX KEY BYTES limit. When...

PT-2026-90324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs component where the ecryptfs parse packet set function incorrectly calculates the remaining packet buffer size using PAGE SIZE - 8. In cases involving...

CVE-2026-89605: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfssendmessagelocked moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfssendmiscdev fails, the...

CVE-2026-89607: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...

PT-2026-90321

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs component where the ecryptfs send message locked function moves a message context from the free list to the allocated list before sending a request to the...

PT-2026-90325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ecryptfs component. The function ecryptfs exorcise daemon drops queued messages from a dying daemon without holding the ecryptfs msg ctx lists mux lock...

PT-2026-72936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service DoS issue exists in the binfmt misc module. An entry registered with the 'F' flag opens its interpreter at registration and retains the file until the entry is freed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: The fs subsystem requires passing the ATGETATTRNOSEC flag to the getattr interface function. When the vfsgetattrnosec function calls the getattr interface of a file system, the nosec flag should be propagated into this function, ...