---
id: CVE-2026-89603
title: >-
  Rejected reason: This CVE ID has been rejected or withdrawn by its CVE
  Numbering Authority.
summary: >-
  Rejected reason: This CVE ID has been rejected or withdrawn by its CVE
  Numbering Authority.
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-367
vendor: Red Hat
product: Red Hat Enterprise Linux 9
affected:
  - enterprise_linux 10
  - enterprise_linux 9
published: '2026-09-11'
updated: '2026-10-16'
sourceUpdated: '2026-10-16T07:17:13.597'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89603'
references:
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89603.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-89603'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2532493'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-89603'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89603'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89603.mbox
  - url: 'https://git.kernel.org/stable/c/eca5ed4200f0be3e91f8a237b1f37582030a93a8'
  - url: 'https://git.kernel.org/stable/c/8709e7e1dd7d7de0651e61700edf24f5784f9243'
  - url: 'https://git.kernel.org/stable/c/22bb836fc133331982c264227a899d4b26a09706'
  - url: 'https://git.kernel.org/stable/c/23001ee5d8631e30192cde6f6d3ccb6805570499'
  - url: 'https://git.kernel.org/stable/c/09e8880ce5409bdb84da991b053d7087502c181e'
  - url: 'https://git.kernel.org/stable/c/459f33f82864723a7fa366cf1091d9c6c893b6b2'
  - url: 'https://git.kernel.org/stable/c/ab4647459098a43e9d6fdb860836f08c962f3774'
  - url: 'https://git.kernel.org/stable/c/4a3591287fb7f808e209b4974ed337f609a2006b'
tags:
  - nvd
  - csaf
  - vex
  - red-hat
  - cve.org
cvssSource: vendor
scores:
  vendor: 7.8
  cna: 8.4
ingestedAt: '2026-09-14T15:23:07.451Z'
---

## Overview

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Important · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9 · updated 2026-09-27 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89603.json)