CVE-2026-89993

CVE-2026-89993

published September 16, 2026

CVSS
—
EPSS
0%
Percentile
10.1
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

dmaengine: dw-edma: Initialize IRQ data before requesting IRQs

dw_edma_irq_request() passes struct dw_edma_irq to request_irq() before

dw_edma_channel_setup() fills the back pointer. A shared interrupt can

therefore enter the handler with dw_irq->dw still NULL, leading to a

NULL pointer dereference.

Set the back pointer before installing each handler.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00206 · 10.1th percentile
Published
2026-09-16T15:17Z
References (7)
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:33Z
    dmaengine: dw-edma: Initialize IRQ data before requesting IRQs
    cvelistv5