CVE-2026-89447

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the iommufd access notify unmap() function where internal accesses are skipped because they lack an external unmap callback. The process incorrectly calls iommufd lock obj() before verifying if the access is internal. When iommufd lock obj() succeeds for an internal access, the loop continues without calling the corresponding iommufd put object() function, resulting in a leak of the object reference.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.