Threats tagged 'ghsa-36w9-6524-pc79'

CVE-2026-89995 is a high-severity vulnerability in the Linux kernel's dma-direct subsystem. The issue arose from a code change where the helper function dma_direct_alloc_from_pool() was altered to return a CPU address instead of a struct page pointer, causing inconsistency with callers expecting a struct page pointer. This was fixed by reverting the return type to struct page * and passing the CPU address via an out-parameter.