CVE-2026-89802

A flaw was found in the Linux kernel's drm/nouveau/uvmm component. When unwinding an OP_MAP_SPARSE operation, a NULL pointer dereference can occur if a subsequent operation in the same job fails. This vulnerability can be exploited by a local attacker with access to a render-node file descriptor, leading to a system crash and a Denial of Service (DoS).

Red Hat has evaluated this vulnerability as Moderate because exploitation is confined to local authenticated users with direct access to DRM render nodes and only leads to a kernel crash, preventing unauthorized data modification or disclosure. The issue specifically affects environments where the open-source Nouveau graphic driver is active on hardware with supported NVIDIA display adapters. Systems running headless server deployments, virtual instances without GPU pass-through, or configurations utilizing alternative display drivers are not exposed to this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.