CVE-2026-89594

HighCVSS 7.8/10Last modified Oct 19, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device

The OMAP SSI driver uses a synthetic HSI controller device allocated via hsi_alloc_controller(), which does not go through the normal OF/platform device initialization path.

As a result, the embedded struct device does not have a DMA mask initialized by default.

After recent DMA API hardening changes, dma_map_sg() and related helpers now require a valid dma_mask to be present, otherwise the driver may crash or trigger warnings when attempting DMA mapping operations.

Fix this by explicitly initializing the DMA mask for the SSI controller device and setting a 32-bit DMA mask, which matches the hardware capabilities.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= f959dcd6ddfd29235030e8026471ac1b022ad2b0, < 6a5426f56de98faf7886702f8720828bf346a48f; >= f959dcd6ddfd29235030e8026471ac1b022ad2b0, < a4beb841f84e0e6ad5ff3d114f43ad30165572dd; >= f959dcd6ddfd29235030e8026471ac1b022ad2b0, < 9ecef057b7a7f165ce66eaf07cb4cf85d10ed9c7; >= f959dcd6ddfd29235030e8026471ac1b022ad2b0, < 9963a65be2befff82b5f5a7cfcd7ac4aca081c0b; >= f959dcd6ddfd29235030e8026471ac1b022ad2b0, < e8d47e309c704df95816e7442f05947424d8b33f; >= f959dcd6ddfd29235030e8026471ac1b022ad2b0, < 4e019e5e247bfe877fdf288f2d6ec1b4c850c7c6; >= f959dcd6ddfd29235030e8026471ac1b022ad2b0, < fbffbfdae55954213fea99c5c9856c48dc705019; >= f959dcd6ddfd29235030e8026471ac1b022ad2b0, < e81250ec6b69248b00d38c523dc6a13efaf38aab; 4e57482e8440fac7137832629109730ea4b267aa; >= 5.9.2, < 5.10
LinuxLinux5.10

References

Timeline

Published
Sep 11, 2026
Last modified
Oct 19, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-89595In the Linux kernel, the following vulnerability has been resolved: fsnotify: Fix stale object mask after concurrent mark updates When a mCVE-2026-895967.1In the Linux kernel, the following vulnerability has been resolved: forcedeth: fix off-by-one when saving/restoring non-PCI config space nCVE-2026-895977.8In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb_CVE-2026-89598In the Linux kernel, the following vulnerability has been resolved: fbdev: ssd1307fb: defer I2C transfers from damage callbacks The fbdev CVE-2026-895998.4In the Linux kernel, the following vulnerability has been resolved: fbdev: omapfb: panel-dsi-cm: initialize lock before registering displayCVE-2026-89607.5Spoofing issue in WebExtensions. This vulnerability was fixed in Firefox 151 and Thunderbird 151.CVE-2026-896007.8In the Linux kernel, the following vulnerability has been resolved: fanotify: fix use-after-free of file range info fsnotify_pre_content()CVE-2026-896018.8In the Linux kernel, the following vulnerability has been resolved: ext2: Fix lost inode updates for IS_SYNC inodes ext2_setsize() and extCVE-2026-896027.8In the Linux kernel, the following vulnerability has been resolved: erofs: skip sufficiently large global buffers when resizing z_erofs_gbCVE-2026-89604In the Linux kernel, the following vulnerability has been resolved: efivarfs: Rate limit statfs() handler Ravi reports that statfs() may bCVE-2026-896057.8In the Linux kernel, the following vulnerability has been resolved: ecryptfs: release message context on send failure ecryptfs_send_messagCVE-2026-896067.8In the Linux kernel, the following vulnerability has been resolved: ecryptfs: reject too-small tag 70 packets ecryptfs_parse_tag_70_packet
CVE-2026-89594: High severity, CVSS 7.8 | Vulnix