Answer in brief
CVE-2026-89606 records a High severity (CVSS 7.8) vulnerability in ecryptfs: reject too-small tag 70 packets. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
CVSS is 7.8. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=9c79f34f7ee71cd28272332b424ca64b2be006ab <9d88391bbed76eb091cddd50b0af87b1c6f22589 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <b31da1ecf13929a8d7f8d2727843d2fe35396b75 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <d2869768eab5648e6edc05f47e0716e5328e6681 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f | 9d88391bbed76eb091cddd50b0af87b1c6f22589, b31da1ecf13929a8d7f8d2727843d2fe35396b75, d2869768eab5648e6edc05f47e0716e5328e6681, e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f |
| Linux/Linuxgeneric | 2.6.29 | Not reported |
| Linux/Linuxgeneric | >=9c79f34f7ee71cd28272332b424ca64b2be006ab <df5f375a6151ef71f636da044bcef90c26697255 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <5668121974eb7f7aa82793a9d0d13abadb8904dc || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <2e5afed9503dd1d85004c09503adc2cb584c0188 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <414a0f04feb06f03523edf7e2a8be1d7f1a9b160 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <9d88391bbed76eb091cddd50b0af87b1c6f22589 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <b31da1ecf13929a8d7f8d2727843d2fe35396b75 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <d2869768eab5648e6edc05f47e0716e5328e6681 || >=9c79f34f7ee71cd28272332b424ca64b2be006ab <e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f | df5f375a6151ef71f636da044bcef90c26697255, 5668121974eb7f7aa82793a9d0d13abadb8904dc, 2e5afed9503dd1d85004c09503adc2cb584c0188, 414a0f04feb06f03523edf7e2a8be1d7f1a9b160, 9d88391bbed76eb091cddd50b0af87b1c6f22589, b31da1ecf13929a8d7f8d2727843d2fe35396b75, d2869768eab5648e6edc05f47e0716e5328e6681, e97bbe1b2bd82ec2ae37ad2e4965b4d3e78bbf7f |
Published upstream
Sep 11, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Oct 19, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 11, 2026
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet() subtracts fixed metadata fields from the parsed packet body size to derive the encrypted filename size. A malformed packet with a body smaller than those fixed fields can underflow that size calculation. Reject tag 70 packets before the subtraction unless the body contains the signature, cipher code, and at least one byte of encrypted filename data.
Quoted source text, attributed separately from HOL analysis.