CVE-2026-89452

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the msm iommu probe() function where the IOMMU object is added to qcom iommu devices before the sysfs device is added and registered with the IOMMU core. If iommu device sysfs add() or iommu device register() fails, the probe returns while the object remains in qcom iommu devices. This creates a dangling list entry that can be dereferenced during subsequent list walks, potentially leading to a use-after-free condition. A use-after-free is a situation where a program continues to use a pointer after the memory it points to has been freed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.