CVE-2026-89591
Last modified
CVE-2026-89591 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: accel/rocket: initialize job domain before cleanup paths rocket_ioctl_submit_job() releases rjob through rocket_job_put() on allocation error paths. rocket_job_cleanup() unconditionally calls rocket_iommu_domain_put(job->domain), but job->domain is assigned only after task copying and BO lookups.
Description
In the Linux kernel, the following vulnerability has been resolved: accel/rocket: initialize job domain before cleanup paths rocket_ioctl_submit_job() releases rjob through rocket_job_put() on allocation error paths. rocket_job_cleanup() unconditionally calls rocket_iommu_domain_put(job->domain), but job->domain is assigned only after task copying and BO lookups. A failure before that assignment can therefore clean up a job with a NULL domain pointer. Take the per-file domain reference before the first error path can release rjob. Also clear rjob->tasks after freeing it in rocket_copy_tasks(), so the common cleanup path cannot free the task array again after a task-copy error.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 0810d5ad88a18f1e6d549853a388ad0316f74e36, < 3043230296653a609ab50006899e64bbb2d99465; >= 0810d5ad88a18f1e6d549853a388ad0316f74e36, < 81731f1eda5e6a1dfad31445f741de9bbefbb08e; >= 0810d5ad88a18f1e6d549853a388ad0316f74e36, < 70e6a33d68a9b03335c5426332666e52d07f45d6 |
| Linux | Linux | 6.18 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-89591?
How severe is CVE-2026-89591?
How do I fix CVE-2026-89591?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-89586In the Linux kernel, the following vulnerability has been re…8.2
- CVE-2026-89587In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-89588In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-89589In the Linux kernel, the following vulnerability has been re…
- CVE-2026-8959Sandbox escape due to incorrect boundary conditions in the W…9.6
- CVE-2026-89590In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89592In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89593In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-89594In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-89595In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89596In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-89597In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-89591?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
