CVE-2026-89810
Last modified
CVE-2026-89810 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram If page migration from device to sys ram fails for some reasons driver needs release and unlock allocated system pages. To do that driver should use page physical address, or pfn, then get struct page*.
Description
In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Fix error path at svm_migrate_copy_to_ram If page migration from device to sys ram fails for some reasons driver needs release and unlock allocated system pages. To do that driver should use page physical address, or pfn, then get struct page*. Current driver uses dma address(for adev) that is not correct with IOMMU enabled, or even in general. The patch releases and unlocks allocated system pages based on where migration failed by struct page* of sys ram pages. Also dma_unmap correspodent system ram pages at error path.
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda, < da87bcad1f781d822e7ced6d1de9dbc6d381c72e; >= 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda, < a2035918a7a1d8fd3bb79d22e1e149294a5a8418; >= 48ff079b28d82dbce000cc45c0fd35b6ae9ffbda, < 960c4a8069bfd352c48cc88592618f1ebe24c69e |
| Linux | Linux | 5.14 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-89810?
How severe is CVE-2026-89810?
How do I fix CVE-2026-89810?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-89805In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-89806In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-89807In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89808In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-89809In the Linux kernel, the following vulnerability has been re…
- CVE-2026-8981The Custom Block Builder WordPress plugin before 4.3.0 does…3.5
- CVE-2026-89811In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-89812In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89813In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89814In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-89815In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-89816In the Linux kernel, the following vulnerability has been re…
Are you affected by CVE-2026-89810?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
