CVE-2026-89446

Received Received - Intake

iommufd Kernel Memory Leak in IOAS Handling

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xa_store() failure iommufd_take_all_iova_rwsem() takes an object reference and the iova_rwsem write lock before storing the IOAS in the temporary ioas_list xarray. If xa_store() fails, the current IOAS has not been inserted into ioas_list yet. iommufd_release_all_iova_rwsem() only unwinds IOAS objects already present in that xarray, so it cannot release the current IOAS. Release the current IOAS rwsem and object reference before unwinding the previously stored entries.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-10-01

NVD

CVE-2026-89446

EUVD

EUVD-2026-76352

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This is a Linux kernel vulnerability where a function fails to properly release a resource (IOAS) when storing it in a temporary list fails. The iommufd_take_all_iova_rwsem() function locks and stores the IOAS, but if the storage operation fails, the function does not release the lock and reference, leading to a resource leak.

Detection Guidance

This vulnerability is specific to the Linux kernel's iommufd subsystem and requires kernel-level inspection. Detection involves checking kernel logs for iommufd-related errors or monitoring for abnormal behavior in IOAS management. Commands like dmesg | grep iommufd or journalctl -k | grep iommufd may help identify issues. Ensure your kernel is updated to a patched version.

Impact Analysis

This could lead to system instability or crashes due to resource leaks. It may cause performance degradation or unexpected behavior in systems using the Linux kernel's iommufd subsystem, particularly those managing I/O memory management.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a Linux kernel memory management issue that could lead to resource leaks but does not involve data breaches or unauthorized access to sensitive information.

Mitigation Strategies

Apply the latest kernel update that includes the fix for this vulnerability. If immediate patching is not possible, consider disabling the iommufd subsystem if it is not critical to your operations. Monitor kernel security advisories for updates.

Hi! I’m here to help you understand CVE-2026-89446. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70