CVE-2026-89446Medium· 5.5▾ SunlitA flaw was found in the Linux kernel's iommufd component. When the system attempts to store an Input/Output Address Space (IOAS) object and the storage operation fails, the IOAS object's associated resources, such as its write lock and obj…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 4.4
none → medium
— → 4.4
none → medium
Last analysed / modified upstream
— → 5.5
none → medium
A flaw was found in the Linux kernel's iommufd component. When the system attempts to store an Input/Output Address Space (IOAS) object and the storage operation fails, the IOAS object's associated resources, such as its write lock and object reference, are not properly released. This oversight can lead to a resource leak, which a local attacker could potentially exploit to cause a Denial of Service (DoS) condition due to resource exhaustion.
kernel: iommufd: Release current IOAS on xa_store() failure — rated Low by Red Hat. Released 2026-09-11, updated 2026-09-18.
Affected:
No fix planned:
Not affected:
Fix deferred
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-80948Medium· 5.5kernel: wifi: iwlwifi: dvm: fix memory leak in iwl_op_mode_dvm_start() (CVE-2026-80948)
CVE-2026-80930Medium· 5.5kernel: tpm: tpm_i2c_nuvoton: disable IRQ on wait timeout (CVE-2026-80930)
CVE-2026-80939Medium· 5.5kernel: wifi: rtw89: pci: add .shutdown callback to stop rfkill polling on reboot (CVE-2026-80939)
CVE-2026-80941Medium· 5.5kernel: wifi: rtw88: Fix potential memory leak in rtw_txq_push_skb() (CVE-2026-80941)
CVE-2026-80949Medium· 5.5kernel: wifi: brcmfmac: Fix memory leak in brcmf_sdio_read_control() (CVE-2026-80949)
CVE-2026-80987Medium· 5.5kernel: NTB: ntb_transport: Reject oversized TX buffers (CVE-2026-80987)