CVE-2026-89823

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists between a partial drm dev register() failure and an ioctl operation. If drm dev register() fails after a minor has been registered, userspace may open that minor and enter a drm dev enter() critical section. Because the unplugged flag is not set, the ioctl operation can proceed while the error path is tearing down device resources. This is addressed by implementing drm dev synchronize unplug(), which sets the unplugged flag and waits for the SRCU (Sleepable Read-Copy-Update) barrier to ensure all active drm dev enter() critical sections finish before cleanup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.