Answer in brief
CVE-2026-89993 records a Unknown severity vulnerability in dmaengine: dw-edma: Initialize IRQ data before requesting IRQs. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf <b86280b12ccf33b68b309b7cb0e4476894dfe77c || >=e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf <07e50cef557def076418c67051a336e4c6bd50e1 || >=e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf <17ef63843c0fcbf1efdfbbfb0f5584a5ea2c91ba || >=e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf <d232bc6cf4562132ef50644484dfd4b23a593295 || >=e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf <fac202d73e7a649b7d4010325c6c6dcd9334fe65 || >=e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf <d91fb6c0d10dad32929dc5c6850f89df34e1bfcd || >=e63d79d1ffcd2201a2dbff1d7a1184b8f3ec74cf <647217abea849d3d45f8cb0b8ee5b78d50f26985 | b86280b12ccf33b68b309b7cb0e4476894dfe77c, 07e50cef557def076418c67051a336e4c6bd50e1, 17ef63843c0fcbf1efdfbbfb0f5584a5ea2c91ba, d232bc6cf4562132ef50644484dfd4b23a593295, fac202d73e7a649b7d4010325c6c6dcd9334fe65, d91fb6c0d10dad32929dc5c6850f89df34e1bfcd, 647217abea849d3d45f8cb0b8ee5b78d50f26985 |
| Linux/Linuxgeneric | 5.3 | Not reported |
Published upstream
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 16, 2026
In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Initialize IRQ data before requesting IRQs dw_edma_irq_request() passes struct dw_edma_irq to request_irq() before dw_edma_channel_setup() fills the back pointer. A shared interrupt can therefore enter the handler with dw_irq->dw still NULL, leading to a NULL pointer dereference. Set the back pointer before installing each handler.
Quoted source text, attributed separately from HOL analysis.