CVE-2026-89605: ecryptfs: release message context on send failure
In the Linux kernel, the following vulnerability has been resolved:
ecryptfs: release message context on send failure
ecryptfssendmessagelocked() moves a message context from the free list to the allocated list before sending the request to the userspace daemon.
If ecryptfssendmiscdev() fails, the context is left on the allocated list and cannot be reused. Move it back to the free list on failure and clear the caller's pointer.
Affected Software
Event History
Frequently Asked Questions
Under what condition does the message context leak occur?
It occurs when ecryptfs_send_message_locked() has moved a message context from the free list to the allocated list and the subsequent ecryptfs_send_miscdev() request to the userspace daemon fails.
What is the practical impact of a failed send?
The message context remains on the allocated list instead of returning to the free list, so it cannot be reused. The fix returns the context to the free list and clears the caller's pointer.