CVE-2026-89594

Received Received - Intake

DMA Mask Missing in OMAP SSI Controller Driver

Publication date: 2026-09-11

Last updated on: 2026-09-11

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsi_alloc_controller(), which does not go through the normal OF/platform device initialization path. As a result, the embedded struct device does not have a DMA mask initialized by default. After recent DMA API hardening changes, dma_map_sg() and related helpers now require a valid dma_mask to be present, otherwise the driver may crash or trigger warnings when attempting DMA mapping operations. Fix this by explicitly initializing the DMA mask for the SSI controller device and setting a 32-bit DMA mask, which matches the hardware capabilities.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-11

Generated

2026-09-12

AI Q&A

2026-09-12

EPSS Evaluated

N/A

NVD

CVE-2026-89594

EUVD

EUVD-2026-76506

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is in the Linux kernel's OMAP SSI driver. The driver creates a synthetic HSI controller device that skips normal device initialization. Without a DMA mask set, DMA operations like dma_map_sg() can fail, causing crashes or warnings. The fix initializes a 32-bit DMA mask for the device.

Detection Guidance

This vulnerability is specific to the Linux kernel's OMAP SSI driver and may not have direct network detection methods. Check kernel logs for DMA-related errors or warnings using commands like dmesg | grep -i dma or journalctl -k | grep -i dma. If the system crashes during DMA operations, it may indicate exploitation.

Impact Analysis

If you use a system with the affected Linux kernel, this vulnerability could cause system instability or crashes during DMA operations. It may lead to data corruption or denial of service if the SSI controller is actively used.

Mitigation Strategies

Update the Linux kernel to a patched version that includes the fix for CVE-2026-89594. If immediate patching is not possible, disable the OMAP SSI driver if unused by blacklisting the module via modprobe.blacklist=omap_ssi_core in kernel parameters.

Hi! I’m here to help you understand CVE-2026-89594. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70