Use-After-Free Vulnerability in Linux Kernel Affecting RapidIO Interface

CVE-2026-89742

What is CVE-2026-89742?

A use-after-free vulnerability exists in the Linux kernel's RapidIO mport character device interface. The issue arises during the dma_req_free() process, where a mutex is unlocked after a mapping may have already been freed, potentially leading to dereferencing an invalid object. This flaw can be exploited from userspace, which could allow attackers to affect the stability and security of affected systems. Proper precautions must be taken to ensure the mutex and mapping are handled correctly to mitigate this issue.

References