In the Linux kernel, the following vulnerability has been resolved: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add… (CVE-2026-89449)
A memory leak vulnerability in the Linux kernel's iommu subsystem was fixed. The issue occurs when device_add fails in iommu_mock_device_add, causing dev->iommu to remain allocated and not freed properly. This leads to unreferenced memory objects detected by kmemleak during fuzz testing.
AI Analysis
Technical Summary
The Linux kernel's iommu_mock_device_add function calls iommu_fwspec_init, which allocates dev->iommu and dev->iommu->fwspec. If device_add(dev) subsequently fails, only iommu_fwspec_free(dev) is called, freeing fwspec but not dev->iommu, causing a memory leak. The fix replaces the call to iommu_fwspec_free(dev) with dev_iommu_free(dev) in the failure path, ensuring both fwspec and dev->iommu are freed and dev->iommu is cleared.
Potential Impact
This vulnerability causes a memory leak in the Linux kernel's iommu subsystem when device_add fails during iommu_mock_device_add. While it does not directly lead to code execution or privilege escalation, the leak can degrade system stability or performance over time, especially under fuzzing or heavy device initialization failure conditions.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source code that replaces the improper free call with the correct dev_iommu_free(dev) in the device_add failure path. Users should apply the official kernel update that includes this patch once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
In the Linux kernel, the following vulnerability has been resolved: iommu: Fix dev_iommu memory leak when device_add fails in iommu_mock_device_add… (CVE-2026-89449)
Description
A memory leak vulnerability in the Linux kernel's iommu subsystem was fixed. The issue occurs when device_add fails in iommu_mock_device_add, causing dev->iommu to remain allocated and not freed properly. This leads to unreferenced memory objects detected by kmemleak during fuzz testing.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel's iommu_mock_device_add function calls iommu_fwspec_init, which allocates dev->iommu and dev->iommu->fwspec. If device_add(dev) subsequently fails, only iommu_fwspec_free(dev) is called, freeing fwspec but not dev->iommu, causing a memory leak. The fix replaces the call to iommu_fwspec_free(dev) with dev_iommu_free(dev) in the failure path, ensuring both fwspec and dev->iommu are freed and dev->iommu is cleared.
Potential Impact
This vulnerability causes a memory leak in the Linux kernel's iommu subsystem when device_add fails during iommu_mock_device_add. While it does not directly lead to code execution or privilege escalation, the leak can degrade system stability or performance over time, especially under fuzzing or heavy device initialization failure conditions.
Mitigation Recommendations
A fix has been implemented in the Linux kernel source code that replaces the improper free call with the correct dev_iommu_free(dev) in the device_add failure path. Users should apply the official kernel update that includes this patch once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-3365-g9v5-8jg9
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89449"]
Threat ID: 6aa4a02455bf5e2cf5a869b7
Added to database: 09/12/2026, 00:43:16 UTC
Last enriched: 09/12/2026, 01:17:47 UTC
Last updated: 09/12/2026, 01:17:47 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.