# CVE-2026-89995

Linux kernel dma-direct bug can cause kernel memory corruption

- Page: https://www.vulneraibility.com/cve/CVE-2026-89995
- CVSS: 8.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.35% (percentile 28.6)
- Published: 2026-09-16

## Affected versions

- Linux: affected >= 5b138c534fda57c2ebc1e6de72578aa1d70788a6 and < c3fdb94da43ff23287f85664174c45c45e881a3f; >= 5b138c534fda57c2ebc1e6de72578aa1d70788a6 and < 408ff2d5bf555bd3f4c84a2edb95c0690bf9edc8; >= 5b138c534fda57c2ebc1e6de72578aa1d70788a6 and < feeb2ef775081a6c188cdd10e7a45369a07ce531; >= 5b138c534fda57c2ebc1e6de72578aa1d70788a6 and < 94a04ad732c9f8b9554270fc4038a06737de5c22; 5.10; fixed in < 5.10, >= 6.12.110 and <= 6.12.*, >= 6.18.51 and <= 6.18.*, >= 7.2.5 and <= 7.2.*, >= 7.3-rc1 and <= *

A version outside these ranges is not a statement that it is unaffected.

## Impact

Kernel memory corruption via dma_direct_alloc_from_pool type mismatch, enabling crashes, local privilege escalation, or arbitrary kernel code execution

## Action

Patch when possible

## Recommendation

Apply vendor kernel updates or upgrade to fixed stable kernel

## References

- [other] https://git.kernel.org/stable/c/1ca96bbfef42bbfb139cc6eb1d940c8ca9046f95
- [other] https://git.kernel.org/stable/c/7801e616fbe3661f9471b2e9bfcb1ed35460bf16
- [other] https://git.kernel.org/stable/c/c3fdb94da43ff23287f85664174c45c45e881a3f
- [other] https://git.kernel.org/stable/c/408ff2d5bf555bd3f4c84a2edb95c0690bf9edc8
- [other] https://git.kernel.org/stable/c/feeb2ef775081a6c188cdd10e7a45369a07ce531
- [other] https://git.kernel.org/stable/c/94a04ad732c9f8b9554270fc4038a06737de5c22

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.