CVE-2026-89609: ecryptfs: hold msg ctx list lock when cleaning daemon queue
Published Sep 11, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ecryptfs: hold msg ctx list lock when cleaning daemon queue
ecryptfsexorcisedaemon() drops queued messages from a dying daemon without holding ecryptfsmsgctxlistsmux, but ecryptfsmsgctxalloctofree() requires that lock.
Take the list lock while moving the queued contexts back to the free list to avoid racing with other global msg ctx list users.
Affected Software
1 affected component
Linux Kernel
Event History
Sep 11, 2026
CVE Published
via MITRE·07:45 PM
Data Sourced
via MITRE·07:45 PM
Description
Frequently Asked Questions
1
What condition triggers the unsafe cleanup path?
The path is reached when ecryptfs_exorcise_daemon() drops queued messages for a dying daemon.
2
What race is fixed by the change?
Queued message contexts were moved back to the free list without holding ecryptfs_msg_ctx_lists_mux, even though ecryptfs_msg_ctx_alloc_to_free() requires that lock. This could race with other users of the global message-context lists.