PT-2026-90324

CVE-2026-89608

·

Published

2026-09-11

·

Updated

2026-11-12

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description An issue exists in the ecryptfs component where the ecryptfs parse packet set() function incorrectly calculates the remaining packet buffer size using PAGE SIZE - 8. In cases involving version 1 headers, the packet set begins further into the header, leading to an overstatement of the available buffer size.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-100184
OESA-2026-4039
OPENSUSE-SU-2026:11880-1
SUSE-SU-2026:24550-1
SUSE-SU-2026:24619-1
SUSE-SU-2026:24643-1
SUSE-SU-2026:24648-1
SUSE-SU-2026:24651-1
SUSE-SU-2026:24662-1
SUSE-SU-2026:5091-1
SUSE-SU-2026:5121-1
USN-8959-1
USN-8960-1
USN-8961-1
USN-8962-1
USN-8963-1
USN-9002-1
USN-9019-1
USN-9020-1
USN-9021-1
USN-9022-1
USN-9023-1
USN-9024-1
USN-9025-1
USN-9026-1
USN-9029-1
USN-9039-1
USN-9040-1
USN-9066-1
Found an issue in the description? Have something to add? Feel free to write us 👾