SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89594

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the OMAP SSI driver in the Linux kernel, where the synthetic HSI controller device lacks an initialized DMA mask, leading to potential crashes or warnings during DMA mapping operations. This issue arises from the driver not following the standard device initialization path, which can result in instability in systems utilizing this driver. Organizations using affected Linux kernels, particularly those with embedded systems relying on the OMAP SSI controller, should prioritize applying the fix to ensure system reliability and prevent potential disruptions.

CVE
CVE-2026-89594
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device The OMAP SSI driver uses a synthetic HSI controller device allocated via hsi_alloc_controller(), which does not go through the normal OF/platform device initialization path. As a result, the embedded struct device does not have a DMA mask initialized by default. After recent DMA API hardening changes, dma_map_sg() and related helpers now require a valid dma_mask to be present, otherwise the driver may crash or trigger warnings when attempting DMA mapping operations. Fix this by explicitly initializing the DMA mask for the SSI controller device and setting a 32-bit DMA mask, which matches the hardware capabilities.