CVE-2026-89742

A flaw was found in the Linux kernel. A local user could exploit a use-after-free vulnerability in the dmareqfree function within the RapidIO mport character device interface. This flaw occurs when the dmareqfree function attempts to dereference a freed object after dropping the last reference to...

UBUNTU-CVE-2026-89742

In the Linux kernel, the following vulnerability has been resolved: rapidio: mportcdev: fix use-after-free in dmareqfree dmareqfree acquires bufmutex through req-map, drops the mapping reference with krefput, and then dereferences req-map again to unlock the mutex. If krefput drops the last...

PT-2026-90458

In the Linux kernel, the following vulnerability has been resolved: rapidio: mport cdev: fix use-after-free in dma req free dma req free acquires buf mutex through req-map, drops the mapping reference with kref put, and then dereferences req-map again to unlock the mutex. If kref put drops the la...

CVE-2022-50245 rapidio: fix possible UAF when kfifo_alloc() fails

In the Linux kernel, the following vulnerability has been resolved: rapidio: fix possible UAF when kfifoalloc fails If kfifoalloc fails in mportcdevopen, goto errfifo and just free priv. But priv is still in the chdev-filelist, then list traversal may cause UAF. This fixes the following smatch...