Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2026/10/05 7:48 p.m.•3 views

CVE-2026-89996

A flaw was found in the Linux kernel's dma-buf subsystem. A local attacker can exploit a race condition during the DMAHEAPIOCTLALLOC operation. If the copytouser function fails after a file descriptor fd has been installed, the fd is leaked for the lifetime of the process. This continuous leaking...

5.5CVSS5.6AI score0.00209EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/16 11:17 a.m.•10 views

AZL-101688 CVE-2026-89996 affecting package kernel 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma-buf and installs an fd into the caller's fd table via dmabuffd - fdinstall before dmaheapioctl copies the result back to userspace. ...

5.8AI score0.00209EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/16 11:17 a.m.•12 views

CVE-2026-89996

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma-buf and installs an fd into the caller's fd table via dmabuffd - fdinstall before dmaheapioctl copies the result back to userspace. ...

0.00209EPSS
SaveExploits0References4
OSV
OSV
•added 2026/09/16 10:33 a.m.•9 views

CVE-2026-89996 dma-buf: dma-heap: don't publish fd before copy_to_user() succeeds

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma-buf and installs an fd into the caller's fd table via dmabuffd - fdinstall before dmaheapioctl copies the result back to userspace. ...

5.8AI score
SaveExploits0References7
EUVD
EUVD
•added 2026/09/16 10:33 a.m.•12 views

EUVD-2026-80604

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma-buf and installs an fd into the caller's fd table via dmabuffd - fdinstall before dmaheapioctl copies the result back to userspace. ...

5.8AI score0.00209EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/16 12:00 a.m.•4 views

CVE-2026-89996: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: dma-buf: dma-heap: don't publish fd before copytouser succeeds DMAHEAPIOCTLALLOC allocates a dma-buf and installs an fd into the caller's fd table via dmabuffd - fdinstall before dmaheapioctl copies the result back to userspace. ...

5.8AI score0.00209EPSS
SaveExploits0References1
Rows per page
Query Builder