OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89995

HIGH · CVSS 8.8 EPSS 0.38%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's DMA (Direct Memory Access) functionality, specifically in the `dma_direct_alloc_from_pool()` method, which improperly returns a CPU address instead of a struct page pointer. This misalignment can lead to potential memory management issues, impacting system stability and security. Organizations utilizing Linux in environments where DMA operations are critical should prioritize applying the relevant patches to mitigate any risks associated with this vulnerability.

CVE
CVE-2026-89995
Severity
HIGH
CVSS
8.8
EPSS
0.38%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: dma-direct: return struct page from dma_direct_alloc_from_pool() Commit 5b138c534fda ("dma-direct: factor out a dma_direct_alloc_from_pool helper") changed dma_direct_alloc_from_pool() to return the CPU address from dma_alloc_from_pool(). That fits dma_direct_alloc(), but dma_direct_alloc_pages() also uses the helper and expects a struct page *. Fix this by making dma_direct_alloc_from_pool() return the struct page * again, and pass the CPU address back through an out-parameter for the dma_direct_alloc() caller.