CVE-2026-89976

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the accel/ethosu component where ethosu ioctl submit job() allocates a done fence before validating buffer handles. If an error occurs after this allocation, ethosu job err cleanup() is called, which frees the job but fails to free the uninitialized fence, resulting in a memory leak. Additionally, a scheduler dependency error allows ethosu job run() to return before dma fence init() is executed, causing the cleanup process to pass a zeroed reference count to dma fence put().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.