CVE-2026-89608
Description
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: pass packet set buffer size to parser ecryptfs_parse_packet_set() receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGE_SIZE - 8. For version 1 headers the packet set starts later in the header, so this can overstate the available buffer. Pass the actual packet set buffer length from the caller and calculate per-packet limits from the remaining bytes in that buffer. Recompute the remaining length after consuming a tag 3 packet before parsing the following tag 11 packet.
How to fix
- Linux Linuxe7573b0e3058c6bbdfe81673f22c09900fde9e65, 66a87559ecb26afe80ad512faf728a158e2b81da, 3bd9bb3e167a7c14a50423f6ff03ee0fb007199d, 749fa08d8f1b318bd8f4669a14a8a4a8c1bbdaac, 329de8b9e988b152b938f09224670d97bada0b96, e5d254e654f2311a3c4b9c791d7f216554bcd17a, 747fd45be396a6aea3420ab657a0ab4e60185b05, 2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 237fead619984cc48818fe12ee0ceada3f55b012 ≤ v < e7573b0e3058c6bbdfe81673f22c09900fde9e65, 237fead619984cc48818fe12ee0ceada3f55b012 ≤ v < 66a87559ecb26afe80ad512faf728a158e2b81da, 237fead619984cc48818fe12ee0ceada3f55b012 ≤ v < 3bd9bb3e167a7c14a50423f6ff03ee0fb007199d, 237fead619984cc48818fe12ee0ceada3f55b012 ≤ v < 749fa08d8f1b318bd8f4669a14a8a4a8c1bbdaac, 237fead619984cc48818fe12ee0ceada3f55b012 ≤ v < 329de8b9e988b152b938f09224670d97bada0b96, 237fead619984cc48818fe12ee0ceada3f55b012 ≤ v < e5d254e654f2311a3c4b9c791d7f216554bcd17a, 237fead619984cc48818fe12ee0ceada3f55b012 ≤ v < 747fd45be396a6aea3420ab657a0ab4e60185b05, 237fead619984cc48818fe12ee0ceada3f55b012 ≤ v < 2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2, 2.6.19 | e7573b0e3058c6bbdfe81673f22c09900fde9e65, 66a87559ecb26afe80ad512faf728a158e2b81da, 3bd9bb3e167a7c14a50423f6ff03ee0fb007199d, 749fa08d8f1b318bd8f4669a14a8a4a8c1bbdaac, 329de8b9e988b152b938f09224670d97bada0b96, e5d254e654f2311a3c4b9c791d7f216554bcd17a, 747fd45be396a6aea3420ab657a0ab4e60185b05, 2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.