CVE-2026-89803

CVE-2026-89803 is a use-after-free in the Linux kernel's DRM/Nouveau driver. In nouveau_channel_del(), the fence context is destroyed before the channel-kill event subscription is dropped, leaving a narrow window where a kill event handler can dereference an already-freed fence context. The bug i...