Search: CVE-2026-89777

CVE-2026-89777 is a use-after-free vulnerability in the Linux kernel's vfio/pci driver where a pointer to a freed MSI permission table is not cleared after an initialization failure. This leads to reuse and double free of the same memory, causing potential kernel crashes or memory corruption. The issue occurs because the pointer vdev->msi_perm is freed but not NULLed, allowing stale references to persist across device open/close cycles. The vulnerability has a CVSS score of 8.8, indicating high severity with impacts on confidentiality, integrity, and availability.