Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
Linux kernel 6.6.159.1-1 may give wrong memory address
published 1 month ago
Summary
The Linux kernel version 6.6.159.1-1 contains a coding mistake that can cause the system to provide an incorrect memory address when certain low‑level functions request memory. This could lead to software crashes or unexpected behavior. Updating the kernel to the latest patched version resolves the issue.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Azure Linux:3 | – | kernel |
<= 6.6.157.1-1 <= 6.6.159.1-1 |
| Azure Linux:3 | azure | kernel | <= 6.6.150.1-1 |
Original advisory text
CVE-2026-89995 affecting package kernel 6.6.159.1-1
In the Linux kernel, the following vulnerability has been resolved:
dma-direct: return struct page from dma_direct_alloc_from_pool()
Commit 5b138c534fda ("dma-direct: factor out a dma_direct_alloc_from_pool
helper") changed dma_direct_alloc_from_pool() to return the CPU address
from dma_alloc_from_pool(). That fits dma_direct_alloc(), but
dma_direct_alloc_pages() also uses the helper and expects a struct page *.
Fix this by making dma_direct_alloc_from_pool() return the struct page *
again, and pass the CPU address back through an out-parameter for the
dma_direct_alloc() caller.
dma-direct: return struct page from dma_direct_alloc_from_pool()
Commit 5b138c534fda ("dma-direct: factor out a dma_direct_alloc_from_pool
helper") changed dma_direct_alloc_from_pool() to return the CPU address
from dma_alloc_from_pool(). That fits dma_direct_alloc(), but
dma_direct_alloc_pages() also uses the helper and expects a struct page *.
Fix this by making dma_direct_alloc_from_pool() return the struct page *
again, and pass the CPU address back through an out-parameter for the
dma_direct_alloc() caller.
References
Timeline
Published16 Sep 2026
Updated1 Nov 2026
First seen17 Sep 2026
Sources
AZL-101649 · OSV
Track software like this
Free during beta