CVE-2026-89940

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the iio dma fence implementation. The problem occurs because the implementation uses a lock embedded in iio dmabuf priv, but the iio dma fence can outlive the iio dmabuf priv structure. This is further complicated by the fact that iio buffer dmabuf release() might sleep, while the fence release callback is not permitted to sleep, preventing the use of a simple reference to iio dmabuf priv from iio dma fence.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.