CVE-2026-89995dma-direct: return struct page from dma_direct_alloc_from_pool()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: dma-direct: return struct page from dma_direct_alloc_from_pool() Commit 5b138c534fda ("dma-direct: factor out a dma_direct_alloc_from_pool helper") changed dma_direct_alloc_from_pool() to return the CPU address from dma_alloc_from_pool(). That fits dma_direct_alloc(), but dma_direct_alloc_pages() also uses the helper and expects a struct page *. Fix this by making dma_direct_alloc_from_pool() return the struct page * again, and pass the CPU address back through an out-parameter for the dma_direct_alloc() caller.
- CVSS
- 8.8 HIGH (v3.1, CNA)CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 5b138c534fda57c2ebc1e6de72578aa1d70788a6 before c3fdb94da43ff23287f85664174c45c45e881a3f; from 5b138c534fda57c2ebc1e6de72578aa1d70788a6 before 408ff2d5bf555bd3f4c84a2edb95c0690bf9edc8; from 5b138c534fda57c2ebc1e6de72578aa1d70788a6 before feeb2ef775081a6c188cdd10e7a45369a07ce531; from 5b138c534fda57c2ebc1e6de72578aa1d70788a6 before 94a04ad732c9f8b9554270fc4038a06737de5c22 | CNA record |
References
- https://git.kernel.org/stable/c/c3fdb94da43ff23287f85664174c45c45e881a3f
- https://git.kernel.org/stable/c/408ff2d5bf555bd3f4c84a2edb95c0690bf9edc8
- https://git.kernel.org/stable/c/feeb2ef775081a6c188cdd10e7a45369a07ce531
- https://git.kernel.org/stable/c/94a04ad732c9f8b9554270fc4038a06737de5c22
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.