Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-89997

dm: fix resume-vs-remove race

CVSS 7.8 HighEPSS 0.0016 · 5th percentile

Published by the CVE Program (CNA: Linux) at 16 Sept 2026, 10:33 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 3f77316de0ec0fd208467fbee8d9edc70e2c73b2 to before 9757367bcf1d5d2c50b94d005abca21f3eedd7c3 git
  • affected 3f77316de0ec0fd208467fbee8d9edc70e2c73b2 to before 1ede2bce2bd640605df83db1356fd727159bc9ed git
  • affected 3f77316de0ec0fd208467fbee8d9edc70e2c73b2 to before 3f04e6520d9a53adb1d1daf4dc5d31a60fc77d1f git
  • affected 3f77316de0ec0fd208467fbee8d9edc70e2c73b2 to before 94f3d399c1ddba763c1c5a6501f7375d533d789f git
  • affected 3f77316de0ec0fd208467fbee8d9edc70e2c73b2 to before 3b59530b14fde693e41d8e39bc326df6cbf07b76 git
  • affected 3f77316de0ec0fd208467fbee8d9edc70e2c73b2 to before 36177beff2a9df035991ad8d16ccf8d363ed93ee git
  • affected 3f77316de0ec0fd208467fbee8d9edc70e2c73b2 to before 94380ecd5ff9b2a2b9f6e8a0b5c465159ccfaf71 git
  • affected 3f77316de0ec0fd208467fbee8d9edc70e2c73b2 to before 44b43ec132f1cf3275ecc182d0c82f50c3c4c3d5 git
  • affected 305b06f7334dd43bc952b525d7232f4cae7c3818 git
  • affected 2.6.35.4 to before 2.6.36 semver
Other versions: unaffected
Linux Linux
  • affected 2.6.36
  • unaffected before 2.6.36 semver
  • unaffected 5.10.270 to 5.10.*, inclusive semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.51 to 6.18.*, inclusive semver
  • unaffected 7.2.5 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-89997
CNA
Linux
Tags
Published
16 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0016, the 5th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 16 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.