CVE-2026-89881

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A DMA leak exists in the rtl2832 sdr driver. The rtl2832 sdr remove() function clears the dev->udev variable to NULL during a USB disconnect before pending streaming teardowns are completed. Consequently, when the user space closes the file descriptor, the rtl2832 sdr stop streaming() function calls rtl2832 sdr free stream bufs(), which utilizes usb free coherent(). Because usb free coherent() returns immediately if the device argument is NULL, all active DMA stream buffers and URBs (USB Request Blocks) allocated in rtl2832 sdr alloc urbs() are leaked.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.