HomeDefectsLIN1023-34675
Fixed

LIN1023-34675 : Security Advisory - linux - CVE-2026-89618

Created: Oct 7, 2026    Updated: Oct 8, 2026
Resolved Date: Oct 7, 2026
Found In Version: 10.23.30.2
Fix Version: 10.23.30.8
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  eventfs: Initialize ei->children and ei->list in init_ei()  eventfs_create_dir() allocates the eventfs_inode and initializes it with init_ei(). But this does not initialize the eventfs_inode list_heads. If the eventfs_create_dir() fails due to memory pressure, it will call free_ei() before it initialized the lists, and that checks to make sure the eventfs_inode has no children. But because the list wasn't initialized, it will give a false warning.  Fix it by moving the list initialization into init_ei().  [ Rewrote change log ]
Data source: kernel.org (416baaa9-dc9f-4396-8d5f-8c081fb06d67)