CYBER CODE RED

Get real-time updates on Telegram

P4

CVE-2026-89616: Linux 5.15

CVE-2026-89616. CVSS 3.1 base score 7.5 (HIGH, Source advisory). EPSS 0.00415 (percentile 0.34368), scored 17-Oct-2026.

Affected technology

Linux · 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 7d60a4c49af4d5cb88aa7cbf998d0408bd415055, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before cd40eee4923d104ebec9ac7513b971bc441e431d, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 77d8efd04745cda23858546afdbd9d07b591758e, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 0f699ddb290a24b37e1bc9bf1e3c9dbccf564bea, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 376ee45659a4b943df672ad275c63da00655f929, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 4a1b39b2e10eb8de86265e80cf2be4396bc1dce4, 4342306f0f0d5ff4315a204d315c1b51b914fca5 to before 35d1ea92c7d946e2ebdbe36cdb2c969c8704bebd
Linux

Linux · 5.15
Linux

Component: Not specified by the source
File: fs/ntfs3/frecord.c

Attack conditions (Source advisory, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.5/10) rates confidentiality impact as high; integrity and availability impact as none. The description does not specify what an attacker can achieve beyond these rated impacts.

Published

CCR priority
30.1 /100 (P4)
CVSS 3.1
7.5 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · Source advisory
EPSS
0.00415 · percentile 0.34368 · 2026-10-17
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-89616.html