CVE-2026-89594

CVE-2026-89594

High · published September 12, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device

The OMAP SSI driver uses a synthetic HSI controller device allocated via

hsi_alloc_controller(), which does not go through the normal OF/platform

device initialization path.

As a result, the embedded struct device does not have a DMA mask

initialized by default.

After recent DMA API hardening changes, dma_map_sg() and related helpers

now require a valid dma_mask to be present, otherwise the driver may

crash or trigger warnings when attempting DMA mapping operations.

Fix this by explicitly initializing the DMA mask for the SSI controller

device and setting a 32-bit DMA mask, which matches the hardware

capabilities.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00169 · 5.9th percentile
Published
2026-09-12T00:19Z
References (8)
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:44Z
    hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
    cvelistv5