CVE-2026-89816

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the Direct Rendering Manager (DRM) when PAGE FLIP EVENT is used and a signal is sent to the thread. Specifically, if an event is allocated in the prepare signaling() function, it is subsequently set to NULL in complete signaling(), which prevents the drm crtc commit from being properly released in the drm atomic helper crtc destroy state() function. This issue can be triggered by using a sw sync fence to block the atomic ioctl at drm atomic helper wait for fences() while sending a signal to the thread using DRM MODE PAGE FLIP EVENT. The issue has been observed with amdgpu and vkms drivers.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.