NULL pointer dereference in Linux kernel - CVE-2026-89784
Published: September 17, 2026
Vulnerability identifier: #VU150495
CSH Severity: Low
CVSS v4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-89784
CWE-ID: CWE-476
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to a null pointer dereference in rpcb_register_inet4() and rpcb_register_inet6() when an in-kernel RPC service registers with the local rpcbind after an address-string allocation fails. A local user can cause an in-kernel RPC service to register with the local rpcbind to cause a denial of service.
Exploitation requires sufficient memory pressure for a small GFP_KERNEL allocation to fail.
Affected software
Linux kernel
How to mitigate CVE-2026-89784
Install security update from vendor's repository.
External References
- https://git.kernel.org/stable/c/04441b792ec40eb66349b5fab34b6a2090b5b2dd
- https://git.kernel.org/stable/c/12bf3e0182ccdaf3b412756a756d3944a7dacaa9
- https://git.kernel.org/stable/c/4a6095de8cb1858e05bdf70b3e7d6d7645c25041
- https://git.kernel.org/stable/c/4e01022974355732e748ec8ebc97c558cb624ffe
- https://git.kernel.org/stable/c/5a51c49ddb37b883566874aecc66bc5a2e617a96
- https://git.kernel.org/stable/c/cda4aacfb0bbf5c0f90fd0b42c72c749635d1368
- https://git.kernel.org/stable/c/eb476289c12cc22c8766f8a84eeb7ab46c4e8fb6
- https://git.kernel.org/stable/c/fd22370226a0d8109045d0831fd5aaadee921693