CVE-2026-89618

Summary

In the Linux kernel, the following vulnerability has been resolved:

eventfs: Initialize ei->children and ei->list in init_ei()

eventfs_create_dir() allocates the eventfs_inode and initializes it with init_ei(). But this does not initialize the eventfs_inode list_heads. If the eventfs_create_dir() fails due to memory pressure, it will call free_ei() before it initialized the lists, and that checks to make sure the eventfs_inode has no children. But because the list wasn't initialized, it will give a false warning.

Fix it by moving the list initialization into init_ei().

[ Rewrote change log ]

Affected Software

VendorProductVersion RangeStatus
LinuxLinux5790b1fb3d672d9a1fe3881a7181dfdbe741568f < c480f8af173d5b19c6d9c4311df6bbe352face9eaffected
LinuxLinux5790b1fb3d672d9a1fe3881a7181dfdbe741568f < 5333e18e6b425fcc39c7fea89e3949a2a98bc5e4affected
LinuxLinux5790b1fb3d672d9a1fe3881a7181dfdbe741568f < 76e0f85f650738d768449dbccbc7c55d05f5b609affected
LinuxLinux5790b1fb3d672d9a1fe3881a7181dfdbe741568f < 1704aaaf5d22bc765c168402350d191e24e245bcaffected
LinuxLinux35ee34c0f6d578c9d245438ca29bf2e7024a5a65affected
LinuxLinux6.6.18 < 6.7affected
LinuxLinux6.7affected
LinuxLinux0 < 6.7unaffected
LinuxLinux6.12.109 <= 6.12.*unaffected
LinuxLinux6.18.50 <= 6.18.*unaffected
LinuxLinux7.2.4 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References