HIGH
CVSS 7.8
Published: 2026-09-11
CVE-2026-89594
Software Component Vulnerability Advisory (CWE-Not-Specified)
Seeking technical exploit breakdowns or verified PoC code for CVE-2026-89594?
🔬 Search Writeups & Exploit Archive →
CyberVault Technical Summary
Analyst SynthesisSecurity vulnerability CVE-2026-89594 affecting Generic/Unknown Software Component. Evaluated with CVSS Base Score of 7.8 (HIGH).
Original NVD Description
Source: NIST NVD
In the Linux kernel, the following vulnerability has been resolved:
hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device
The OMAP SSI driver uses a synthetic HSI controller device allocated via
hsi_alloc_controller(), which does not go through the normal OF/platform
device initialization path.
As a result, the embedded struct device does not have a DMA mask
initialized by default.
After recent DMA API hardening changes, dma_map_sg() and related helpers
now require a valid dma_mask to be present, otherwise the driver may
crash or trigger warnings when attempting DMA mapping operations.
Fix this by explicitly initializing the DMA mask for the SSI controller
device and setting a 32-bit DMA mask, which matches the hardware
capabilities.
📊 CVSS v3.1 Metric Breakdown
🎯 Affected Versions Matrix
| Affected Product | Generic/Unknown / Software Component |
| Affected Versions | Unspecified |
| Weakness Enumeration | CWE-Not-Specified |
🛡️ Remediation & Security Action
- Authoritative Guidance: Follow distribution-specific vendor security notices. Advisory status and package patches vary by distribution release.
- Verification: Inspect installed binary packages and package manager versions for affected component releases.
- Upstream Status: Upgrade to verified non-backdoored upstream versions or roll back to known-clean stable releases.
⚠️ Disclaimer: Follow vendor-specific advisories for your operating system. CyberVault does not fabricate unsupported remediation scripts.
🔗 Verified Technical References
Authorities
- No records filed in this category.
Distributions
- No records filed in this category.
Technical Analysis
- No records filed in this category.
Risk Snapshot
7.8
HIGH SEVERITY
CVE ID
CVE-2026-89594
Weakness
CWE-Not-Specified
Vendor
Generic/Unknown
Product
Software Component
Published
2026-09-11
Vector
N/A