14 matches found
CVE-2026-89940
A flaw was found in the Linux kernel's Industrial I/O IIO subsystem. The iiodmafence implementation uses a lock embedded in iiodmabufpriv. However, iiodmafence can outlive iiodmabufpriv, leading to a use-after-free vulnerability. This can result in memory corruption and potentially lead to system...
CVE-2026-89941
A flaw was found in the Linux kernel's IIO Industrial I/O buffer component. The iiodmafence implementation incorrectly uses kfree instead of kfreercu for releasing DMA fence objects. This improper memory deallocation can lead to a use-after-free vulnerability. An attacker could potentially exploi...
SUSE CVE-2026-89940
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafence can outlive the iiodmabufpriv, which can cause a use-after-free. Ti...
CVE-2026-89940
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafence can outlive the iiodmabufpriv, which can cause a use-after-free. Ti...
DEBIAN-CVE-2026-89941
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Make IIO DMA fence release RCU-safe The dmafence documentation states that if a custom release implementation is provided, the dmafence object must be freed in an RCU-safe way. The current iiodmafence implementation...
DEBIAN-CVE-2026-89940
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafence can outlive the iiodmabufpriv, which can cause a use-after-free. Ti...
CVE-2026-89941
CVE-2026-89941 is a use-after-free vulnerability in the Linux kernel IIO buffer subsystem (iio: buffer). The iio_dma_fence implementation provided a custom release callback that called kfree(), which is not RCU-safe as required by the dma_fence documentation. The fix removes the custom release, a...
CVE-2026-89940 iio: buffer: Tie IIO dma fence lock lifetime to the fence
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafence can outlive the iiodmabufpriv, which can cause a use-after-free. Ti...
CVE-2026-89940 iio: buffer: Tie IIO dma fence lock lifetime to the fence
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafence can outlive the iiodmabufpriv, which can cause a use-after-free. Ti...
EUVD-2026-80540
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafence can outlive the iiodmabufpriv, which can cause a use-after-free. Ti...
CVE-2026-89940
CVE-2026-89940 is a use-after-free in the Linux kernel's IIO buffer subsystem. The iio_dma_fence implementation used a lock embedded in iio_dmabuf_priv, but the fence can outlive the iio_dmabuf_priv struct, leading to a use-after-free when the fence accesses the freed lock. The fix ties the lock'...
CVE-2026-89940: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafence can outlive the iiodmabufpriv, which can cause a use-after-free. Ti...
Linux Distros Unpatched Vulnerability : CVE-2026-89940
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafenc...
Linux Distros Unpatched Vulnerability : CVE-2026-89941
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - iio: buffer: Make IIO DMA fence release RCU-safe The dmafence documentation states that if a custom release implementation is provided, the dmafence object must...