CVE-2026-89940

In the Linux kernel, the following vulnerability has been resolved: iio: buffer: Tie IIO dma fence lock lifetime to the fence The iiodmafence implementation currently uses a lock embedded in the iiodmabufpriv. But the iiodmafence can outlive the iiodmabufpriv, which can cause a use-after-free. Ti...

CVE-2026-89940

CVE-2026-89940 is a use-after-free in the Linux kernel's IIO buffer subsystem. The iio_dma_fence implementation used a lock embedded in iio_dmabuf_priv, but the fence can outlive the iio_dmabuf_priv struct, leading to a use-after-free when the fence accesses the freed lock. The fix ties the lock'...