CVE-2026-89553
High
Description
In the Linux kernel, the following vulnerability has been resolved: nouveau/gem: reserve the bo in the info ioctl around the vma lookup In the non-uvmm path, there could be a race between the info lookup finding the vma, and the gem close path closing the vma leading to a use-after-free. Spotted with the help of Opus 4.6.
SeverityHigh
CVSS7.8
Exploit probability—
Product
Linux
PublishedSep 11, 2026
First seenSep 11, 2026
How to fix
Update
- Linux Linux3e9c9090d4cc5a61ab5067ac5502c4fd37891b97, 24340ab41c33e16b3d64d89cb738ecd83c78de49, f57e0d3bee3f7a459c048e10fd1cbcfd1dac2e0f, e05c28bd6043d0fd0bea9c3fc49300a8871a1a81, 208867763843aa82efcbe3b771f1b8e6c7aa820a, ff110e85837d7ecd83f36078107be240ff5ae409, e60466011ac3a6b8045e6cc3c2cbb30d58039d2e, 5e17160d41d92823f3379c1982e1369680c5ce4d or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | e758a3111914af7ee4351be86f1ac0efe87ed06e ≤ v < 3e9c9090d4cc5a61ab5067ac5502c4fd37891b97, e758a3111914af7ee4351be86f1ac0efe87ed06e ≤ v < 24340ab41c33e16b3d64d89cb738ecd83c78de49, e758a3111914af7ee4351be86f1ac0efe87ed06e ≤ v < f57e0d3bee3f7a459c048e10fd1cbcfd1dac2e0f, e758a3111914af7ee4351be86f1ac0efe87ed06e ≤ v < e05c28bd6043d0fd0bea9c3fc49300a8871a1a81, e758a3111914af7ee4351be86f1ac0efe87ed06e ≤ v < 208867763843aa82efcbe3b771f1b8e6c7aa820a, e758a3111914af7ee4351be86f1ac0efe87ed06e ≤ v < ff110e85837d7ecd83f36078107be240ff5ae409, e758a3111914af7ee4351be86f1ac0efe87ed06e ≤ v < e60466011ac3a6b8045e6cc3c2cbb30d58039d2e, e758a3111914af7ee4351be86f1ac0efe87ed06e ≤ v < 5e17160d41d92823f3379c1982e1369680c5ce4d, 3.1 | 3e9c9090d4cc5a61ab5067ac5502c4fd37891b97, 24340ab41c33e16b3d64d89cb738ecd83c78de49, f57e0d3bee3f7a459c048e10fd1cbcfd1dac2e0f, e05c28bd6043d0fd0bea9c3fc49300a8871a1a81, 208867763843aa82efcbe3b771f1b8e6c7aa820a, ff110e85837d7ecd83f36078107be240ff5ae409, e60466011ac3a6b8045e6cc3c2cbb30d58039d2e, 5e17160d41d92823f3379c1982e1369680c5ce4d |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.