CVE-2026-89941

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the IIO buffer implementation. The iio dma fence implementation used kfree() for its custom release process, which violates the dma fence requirement that objects must be freed in an RCU-safe way. RCU (Read-Copy-Update) is a synchronization mechanism that allows multiple readers to access data while it is being updated.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.