Memory leak in Linux kernel - CVE-2026-89881
Published: September 17, 2026
Vulnerability identifier: #VU150404
CSH Severity: Low
CVSS v4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-89881
CWE-ID: CWE-401
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service by leaking DMA resources.
The vulnerability exists due to improper resource cleanup in the rtl2832_sdr driver removal handling when a USB device is disconnected while streaming remains active. A local user can close a file descriptor after the disconnection to cause a denial of service by leaking DMA resources.
Affected software
Linux kernel
How to mitigate CVE-2026-89881
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/034b6a4f9589c04bc3f2bd5125658cd72d3e17c8
- https://git.kernel.org/stable/c/053581d4657c6b5289c5de71a4828d313c005189
- https://git.kernel.org/stable/c/0ef9f19010ae4ba93aca211ea8f0081b9bf7aab2
- https://git.kernel.org/stable/c/234c46b95a032232e31fa5987b84fb8f87a9693b
- https://git.kernel.org/stable/c/7443b16b6dd8889a3b9c5236a09e7c58f0d11dae
- https://git.kernel.org/stable/c/a0d9d9a3b41a1346c26af57aade6ba3f552fa171
- https://git.kernel.org/stable/c/bbf15e83c37d9ac938b7c35c02b748fe54230010
- https://git.kernel.org/stable/c/dabb047c62668f280998e29117c55e41aabac336