CVE-2026-89976
Description
In the Linux kernel, the following vulnerability has been resolved: accel/ethosu: fix job completion fence cleanup ethosu_ioctl_submit_job() allocates done_fence before validating buffer handles. Errors after allocation call ethosu_job_err_cleanup(), which frees the job but leaks the uninitialized fence. A scheduler dependency error also lets ethosu_job_run() return before dma_fence_init(). Normal cleanup then passes a zeroed refcount to dma_fence_put(). Release done_fence in the common cleanup path and use dma_fence_was_initialized() to distinguish initialized fences from raw allocations. [robh: also fix goto]
How to fix
- Linux Linuxb3e0f79af1f27339d8d2527c02cc3e8397c2f69f, 2d2a3adc91950f9a18829dadc7317fb5180a15c5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b ≤ v < b3e0f79af1f27339d8d2527c02cc3e8397c2f69f, 5a5e9c0228e613f0ef2a58b9782d7c0ea8f1e58b ≤ v < 2d2a3adc91950f9a18829dadc7317fb5180a15c5, 6.19 | b3e0f79af1f27339d8d2527c02cc3e8397c2f69f, 2d2a3adc91950f9a18829dadc7317fb5180a15c5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.