SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89553

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

A race condition in the Linux kernel's nouveau/gem component can lead to a use-after-free vulnerability during the info ioctl operation, potentially allowing an attacker to exploit this flaw. This issue primarily affects systems utilizing the Linux kernel with nouveau graphics drivers, and it should be prioritized by organizations using these drivers in environments where security is critical. Users should ensure they are running the latest kernel updates to mitigate this risk.

CVE
CVE-2026-89553
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there could be a race between the info lookup finding the vma, and the gem close path closing the vma leading to a use-after-free. Spotted with the help of Opus 4.6.