PT-2026-90323

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs component where the parse tag 3 packet function fails to properly bound the encrypted key size variable against the ECRYPTFS MAX KEY BYTES limit. When...

CVE-2026-89606: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfsparsetag70packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed...

PT-2026-90324

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs component where the ecryptfs parse packet set function incorrectly calculates the remaining packet buffer size using PAGE SIZE - 8. In cases involving...

PT-2026-90322

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs module where the ecryptfs parse tag 70 packet function subtracts fixed metadata fields from the parsed packet body size to determine the encrypted filenam...

PT-2026-90321

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ecryptfs component where the ecryptfs send message locked function moves a message context from the free list to the allocated list before sending a request to the...

PT-2026-90325

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the ecryptfs component. The function ecryptfs exorcise daemon drops queued messages from a dying daemon without holding the ecryptfs msg ctx lists mux lock...

CVE-2026-89608: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfsparsepacketset receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGESIZE - 8. For version 1 headers the packet set starts lat...

CVE-2026-89607: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject oversized encryptedkeysize in parsetag3packet parsetag3packet set encryptedkeysize from the Tag 3 packet body without bounding it against ECRYPTFSMAXKEYBYTES 64. When encryptedkeysize 64,...

PT-2026-96578

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs parse tag 70 packet subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixe...

CVE-2026-89605: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfssendmessagelocked moves a message context from the free list to the allocated list before sending the request to the userspace daemon. If ecryptfssendmiscdev fails, the...

PT-2026-72936

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A denial of service DoS issue exists in the binfmt misc module. An entry registered with the 'F' flag opens its interpreter at registration and retains the file until the entry is freed...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: The fs subsystem requires passing the ATGETATTRNOSEC flag to the getattr interface function. When the vfsgetattrnosec function calls the getattr interface of a file system, the nosec flag should be propagated into this function, ...

VulnCheck KEV: CVE-2009-2908

The ddelete function in fs/ecryptfs/inode.c in eCryptfs in the Linux kernel 2.6.31 allows local users to cause a denial of service kernel OOPS and possibly execute arbitrary code via unspecified vectors that cause a "negative dentry" and trigger a NULL pointer dereference, as demonstrated via a...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000799)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000799 advisory. The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related t...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-000970)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000970 advisory. The ecryptfsprivilegedopen function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service stac...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001962)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001962 advisory. The ecryptfsprivilegedopen function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service stac...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002691)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002691 advisory. The ecryptfsprivilegedopen function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service stac...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002262)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002262 advisory. The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related t...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2026-001957)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-001957 advisory. The eCryptfs subsystem in the Linux kernel before 3.18 allows local users to gain privileges via a large filesystem stack that includes an overlayfs layer, related t...

MiracleLinux 3 : kernel-2.6.18-194.7.AXS3 (AXSA:2010-464:16)

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2010-464:16 advisory. The kernel package contains the Linux kernel vmlinuz, the core of any Linux operating system. The kernel handles the basic functions of the operating...