CVE-2026-89742

A flaw was found in the Linux kernel. A local user could exploit a use-after-free vulnerability in the dma_req_free() function within the RapidIO mport character device interface. This flaw occurs when the dma_req_free() function attempts to dereference a freed object after dropping the last reference to a mapping. Successful exploitation of this vulnerability could lead to arbitrary code execution or a denial of service.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.