CVE-2026-89994dmaengine: fsl-edma: tracing: no ptr dereference during log output
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dmaengine: fsl-edma: tracing: no ptr dereference during log output The fsl edma events store a pointer to a struct fsl_edma_engine in the ringbuffer and dereference it when a log entry is printed. At this time, the pointer may no longer be valid. Event injection can be used to trigger a crash: $ cd /sys/kernel/tracing $ echo 'value = 0' > events/fsl_edma/edma_writeb/inject $ cat trace The log output needs only edma->membase. Add a membase field at the end of the event and use the new field for log output. Keep the existing fields for backward compatibility.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 11102d0c343ba06ddd303f2503c0ce46d70052f2 before ef02cd3807f39ae1dbc924788d8fa6a85334c435; from 11102d0c343ba06ddd303f2503c0ce46d70052f2 before d382aaf5fed38c6dd2e0cc710d97cb81d660ffa7; 11102d0c343ba06ddd303f2503c0ce46d70052f2 builds before 2a3801ae5c344473e648006c5b03a9216ac54a6a; 11102d0c343ba06ddd303f2503c0ce46d70052f2 builds before 2ea04dca8e627f722caa7a2037cfbae0257f3501 | CNA record |
References
- https://git.kernel.org/stable/c/ef02cd3807f39ae1dbc924788d8fa6a85334c435
- https://git.kernel.org/stable/c/d382aaf5fed38c6dd2e0cc710d97cb81d660ffa7
- https://git.kernel.org/stable/c/2a3801ae5c344473e648006c5b03a9216ac54a6a
- https://git.kernel.org/stable/c/2ea04dca8e627f722caa7a2037cfbae0257f3501
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.