CVE-2026-89618

eventfs: Initialize ei->children and ei->list in init_ei()

State
Published
Severity
Not scored
Published
Sep 11, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

eventfs: Initialize ei->children and ei->list in init_ei()

eventfs_create_dir() allocates the eventfs_inode and initializes it with init_ei(). But this does not initialize the eventfs_inode list_heads. If the eventfs_create_dir() fails due to memory pressure, it will call free_ei() before it initialized the lists, and that checks to make sure the eventfs_inode has no children. But because the list wasn't initialized, it will give a false warning.

Fix it by moving the list initialization into init_ei().

[ Rewrote change log ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 35ee34c0f6d578c9d245438ca29bf2e7024a5a65 to before 069729282fbecfaa8a54062266c338ed23f08005Affected
  • 5790b1fb3d672d9a1fe3881a7181dfdbe741568f to before c480f8af173d5b19c6d9c4311df6bbe352face9eAffected
  • 5790b1fb3d672d9a1fe3881a7181dfdbe741568f to before 5333e18e6b425fcc39c7fea89e3949a2a98bc5e4Affected
  • 5790b1fb3d672d9a1fe3881a7181dfdbe741568f to before 76e0f85f650738d768449dbccbc7c55d05f5b609Affected
  • 5790b1fb3d672d9a1fe3881a7181dfdbe741568f to before 1704aaaf5d22bc765c168402350d191e24e245bcAffected
  • 6.6.18 to before 6.6.157Affected
LinuxLinux
  • 6.7Affected
  • before 6.7Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.109 through 6.12.*Not affected
  • 6.18.50 through 6.18.*Not affected
  • 7.2.4 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.