CVE-2026-89452Disclosure

LOWCVSS 8.4 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

In the Linux kernel, the following vulnerability has been resolved: iommu/msm: Unwind probe state on registration failure msm_iommu_probe() adds its devm-managed IOMMU object to qcom_iommu_devices before adding the IOMMU sysfs device and registering it with the IOMMU core. If iommu_device_sysfs_add() fails, probe returns with the object still on qcom_iommu_devices. The driver core then releases the devm allocation, leaving a dangling list entry that later list walks may dereference. If iommu_device_register() fails, the same dangling list entry remains and the sysfs device is left registered as well. Unwind the sysfs device and global list entry in reverse setup order on the corresponding failure paths.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
Disclosure: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Disclosure

1100.0%

Referenced assets1 URL

By indicator

https://www.valtersit.com/cve/CVE-2026-89452

Full discourse1 post

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters47d
Disclosure
CVE-2026-89452 Linux kernel iommu/msm probe failure leaves a dangling list entry, risking use-after-free on later list walks. No CVSS score and no patch yet. Track it and update the kernel as soon as a fix https://www.valtersit.com/cve/CVE-2026-89452 #CVE #LinuxKernel #infosec #CVE #infosec #XSS #valtersit #snippet #infosec #SysAdmin #cybersecurity #Linux #devsecops #devops #developer #sysadmin #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecurity #cybersecuritynews #cybersecuritytips #python #hacker #linux #kali #ubuntu #debian #docker
Post summary
The tweet discloses CVE-2026-89452 as a Linux kernel iommu/msm use-after-free vulnerability via a dangling list entry, with no CVSS score or patch available, directing readers to track updates on valtersit.com.
0000052
1.1K followersView on X

Explore more

Back to dashboard