« Volver al listado

CVE-2026-89608

Estado: RecibidaAlta (7.1)—

In the Linux kernel, the following vulnerability has been resolved:

ecryptfs: pass packet set buffer size to parser

ecryptfs_parse_packet_set() receives a pointer into the file header, but it calculates the remaining packet buffer size from PAGE_SIZE - 8. For version 1 headers the packet set starts later in the header, so this can overstate the available buffer.

Pass the actual packet set buffer length from the caller and calculate per-packet limits from the remaining bytes in that buffer. Recompute the remaining length after consuming a tag 3 packet before parsing the following tag 11 packet.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

🎯 Técnicas ATT&CK

Cómo se explota esta vulnerabilidad y qué consigue el atacante, en el lenguaje de MITRE ATT&CK.

Vulnerabilidad local (AV:L/PR:L) en kernel que causa DoS (A:H) y lectura de datos (C:H). El bug de buffer permite escalada de privilegios o denegación de servicio desde privilegios bajos.

Inferido por nuestro agente de análisis a partir de la descripción oficial, el vector CVSS y la CWE, y comprobado por un supervisor. Puede contener errores.

🛡️ Mitigaciones ATT&CK que cubren estas técnicas

Threat Intelligence ProgramFilter Network TrafficExecution PreventionApplication Isolation and SandboxingExploit ProtectionUpdate Software

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-89608",
  "cveTags": [],
  "metrics": {
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.1,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "237fead619984cc48818fe12ee0ceada3f55b012",
              "lessThan": "e7573b0e3058c6bbdfe81673f22c09900fde9e65",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "237fead619984cc48818fe12ee0ceada3f55b012",
              "lessThan": "66a87559ecb26afe80ad512faf728a158e2b81da",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "237fead619984cc48818fe12ee0ceada3f55b012",
              "lessThan": "3bd9bb3e167a7c14a50423f6ff03ee0fb007199d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "237fead619984cc48818fe12ee0ceada3f55b012",
              "lessThan": "749fa08d8f1b318bd8f4669a14a8a4a8c1bbdaac",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "237fead619984cc48818fe12ee0ceada3f55b012",
              "lessThan": "329de8b9e988b152b938f09224670d97bada0b96",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "237fead619984cc48818fe12ee0ceada3f55b012",
              "lessThan": "e5d254e654f2311a3c4b9c791d7f216554bcd17a",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "237fead619984cc48818fe12ee0ceada3f55b012",
              "lessThan": "747fd45be396a6aea3420ab657a0ab4e60185b05",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "237fead619984cc48818fe12ee0ceada3f55b012",
              "lessThan": "2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "fs/ecryptfs/crypto.c",
            "fs/ecryptfs/ecryptfs_kernel.h",
            "fs/ecryptfs/keystore.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "2.6.19"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "2.6.19",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver",
              "lessThanOrEqual": "5.10.*"
            },
            {
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver",
              "lessThanOrEqual": "5.15.*"
            },
            {
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.*"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "fs/ecryptfs/crypto.c",
            "fs/ecryptfs/ecryptfs_kernel.h",
            "fs/ecryptfs/keystore.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-11T20:19:45.860",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/2602b79c5b3e2f6fce12e38a670f8e3fda4e46a2",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/329de8b9e988b152b938f09224670d97bada0b96",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/3bd9bb3e167a7c14a50423f6ff03ee0fb007199d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/66a87559ecb26afe80ad512faf728a158e2b81da",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/747fd45be396a6aea3420ab657a0ab4e60185b05",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/749fa08d8f1b318bd8f4669a14a8a4a8c1bbdaac",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e5d254e654f2311a3c4b9c791d7f216554bcd17a",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/e7573b0e3058c6bbdfe81673f22c09900fde9e65",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\necryptfs: pass packet set buffer size to parser\n\necryptfs_parse_packet_set() receives a pointer into the file header, but\nit calculates the remaining packet buffer size from PAGE_SIZE - 8.  For\nversion 1 headers the packet set starts later in the header, so this can\noverstate the available buffer.\n\nPass the actual packet set buffer length from the caller and calculate\nper-packet limits from the remaining bytes in that buffer.  Recompute the\nremaining length after consuming a tag 3 packet before parsing the\nfollowing tag 11 packet."
    }
  ],
  "lastModified": "2026-09-14T13:19:15.080",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}