CVE-2026-89823
Last modified
CVE-2026-89823 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: drm: fix race between partial drm_dev_register() failure and ioctl If drm_dev_register() fails after registering a minor (e.g. render minor registered, primary minor fails), userspace could have opened the first minor and entered a drm_dev_enter() critical section.
Description
In the Linux kernel, the following vulnerability has been resolved: drm: fix race between partial drm_dev_register() failure and ioctl If drm_dev_register() fails after registering a minor (e.g. render minor registered, primary minor fails), userspace could have opened the first minor and entered a drm_dev_enter() critical section. Since the unplugged flag was never set, the ioctl proceeds while the error path tears down device resources. Fix this by introducing drm_dev_synchronize_unplug(), which sets the unplugged flag and waits for the SRCU barrier, ensuring all in-flight drm_dev_enter() critical sections complete before cleanup proceeds; call it on the error path of drm_dev_register().
Metrics
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= bee330f3d67273a68dcb99f59480d59553c008b2, < 26d9162213952927cd59c0d94b7e0e992b347bec; >= bee330f3d67273a68dcb99f59480d59553c008b2, < 24d28d15c0f7f7d4a1c229f8730314f0f8758810; >= bee330f3d67273a68dcb99f59480d59553c008b2, < 6729990df9e70623bf53f855b521ae71ca9cb278; >= bee330f3d67273a68dcb99f59480d59553c008b2, < a0a7e2e177f2f18b9e7318a4c64ac44efd9ef22c; >= bee330f3d67273a68dcb99f59480d59553c008b2, < 19dbfe4d586aecfed121cb3fa62281761d9d341f; >= bee330f3d67273a68dcb99f59480d59553c008b2, < 79d09cfe90304ff4f195e47d569800f5e0f8b854; >= bee330f3d67273a68dcb99f59480d59553c008b2, < 2d1215a72159d00001e08dee162e27718934bee9; >= bee330f3d67273a68dcb99f59480d59553c008b2, < eb197f7d60f00d0f5b1b3505dfc86a7e36045a3e |
| Linux | Linux | 4.18 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-89823?
How severe is CVE-2026-89823?
How do I fix CVE-2026-89823?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-89818In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-89819In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-8982Two undocumented privileged accounts exist in Autel Maxi Cha…8.1
- CVE-2026-89820In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89821In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89822In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89824In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89825In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-89826In the Linux kernel, the following vulnerability has been re…7.1
- CVE-2026-89827In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89828In the Linux kernel, the following vulnerability has been re…
- CVE-2026-89829In the Linux kernel, the following vulnerability has been re…7.8
Are you affected by CVE-2026-89823?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST