CVE-2026-89996

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the dma-heap component where the DMA HEAP IOCTL ALLOC operation installs a file descriptor (fd) into the caller's fd table before the result is successfully copied back to userspace. If the copy to user() function fails, the userspace application does not receive the fd number, but the fd and its underlying dma-buf reference remain visible to other threads in the same process, leading to a resource leak for the lifetime of the process.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.