{"id":"CVE-2026-89594","title":"hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nhsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device\n\nThe OMAP SSI driver uses a synthetic HSI controller device allocated via\nhsi_alloc_controller(…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-909"],"vendor":"Linux","product":"Linux","affected":["Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 6a5426f56de98faf7886702f8720828bf346a48f","Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < a4beb841f84e0e6ad5ff3d114f43ad30165572dd","Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 9ecef057b7a7f165ce66eaf07cb4cf85d10ed9c7","Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 9963a65be2befff82b5f5a7cfcd7ac4aca081c0b","Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < e8d47e309c704df95816e7442f05947424d8b33f","Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 4e019e5e247bfe877fdf288f2d6ec1b4c850c7c6","Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < fbffbfdae55954213fea99c5c9856c48dc705019","Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < e81250ec6b69248b00d38c523dc6a13efaf38aab","Linux 4e57482e8440fac7137832629109730ea4b267aa","Linux >= 5.9.2 < 5.10","Linux 5.10"],"published":"2026-09-11","updated":"2026-10-19","sourceUpdated":"2026-10-19T08:49:26.718Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-89594","references":[{"url":"https://git.kernel.org/stable/c/6a5426f56de98faf7886702f8720828bf346a48f"},{"url":"https://git.kernel.org/stable/c/a4beb841f84e0e6ad5ff3d114f43ad30165572dd"},{"url":"https://git.kernel.org/stable/c/9ecef057b7a7f165ce66eaf07cb4cf85d10ed9c7"},{"url":"https://git.kernel.org/stable/c/9963a65be2befff82b5f5a7cfcd7ac4aca081c0b"},{"url":"https://git.kernel.org/stable/c/e8d47e309c704df95816e7442f05947424d8b33f"},{"url":"https://git.kernel.org/stable/c/4e019e5e247bfe877fdf288f2d6ec1b4c850c7c6"},{"url":"https://git.kernel.org/stable/c/fbffbfdae55954213fea99c5c9856c48dc705019"},{"url":"https://git.kernel.org/stable/c/e81250ec6b69248b00d38c523dc6a13efaf38aab"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89594.json"},{"url":"https://access.redhat.com/security/cve/CVE-2026-89594"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2532500"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89594"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89594"},{"url":"https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89594.mbox"}],"tags":["cve.org","csaf","vex","red-hat","score-dispute"],"epss":0.00169,"epssPercentile":0.06191,"scores":{"cna":7.8,"vendor":5.5},"ingestedAt":"2026-09-14T15:23:07.451Z","slug":"CVE-2026-89594","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nhsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device\n\nThe OMAP SSI driver uses a synthetic HSI controller device allocated via\nhsi_alloc_controller(), which does not go through the normal OF/platform\ndevice initialization path.\n\nAs a result, the embedded struct device does not have a DMA mask\ninitialized by default.\n\nAfter recent DMA API hardening changes, dma_map_sg() and related helpers\nnow require a valid dma_mask to be present, otherwise the driver may\ncrash or trigger warnings when attempting DMA mapping operations.\n\nFix this by explicitly initializing the DMA mask for the SSI controller\ndevice and setting a 32-bit DMA mask, which matches the hardware\ncapabilities.\n\n## Affected\n\n- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 6a5426f56de98faf7886702f8720828bf346a48f`\n- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < a4beb841f84e0e6ad5ff3d114f43ad30165572dd`\n- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 9ecef057b7a7f165ce66eaf07cb4cf85d10ed9c7`\n- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 9963a65be2befff82b5f5a7cfcd7ac4aca081c0b`\n- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < e8d47e309c704df95816e7442f05947424d8b33f`\n- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 4e019e5e247bfe877fdf288f2d6ec1b4c850c7c6`\n- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < fbffbfdae55954213fea99c5c9856c48dc705019`\n- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < e81250ec6b69248b00d38c523dc6a13efaf38aab`\n- `Linux 4e57482e8440fac7137832629109730ea4b267aa`\n- `Linux >= 5.9.2 < 5.10`\n- `Linux 5.10`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **Red Hat VEX** · Moderate · updated 2026-09-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89594.json)","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":224690,"id":"CVE-2026-89594","ts":1792401473844,"field":"cvss","old":"5.5","new":"7.8"},{"seq":224689,"id":"CVE-2026-89594","ts":1792401473844,"field":"severity","old":"medium","new":"high"},{"seq":203955,"id":"CVE-2026-89594","ts":1789490230785,"field":"cvss","old":"7.8","new":"5.5"},{"seq":203954,"id":"CVE-2026-89594","ts":1789490230785,"field":"severity","old":"high","new":"medium"},{"seq":197890,"id":"CVE-2026-89594","ts":1789384320829,"field":"cvss","old":"4.1","new":"7.8"},{"seq":197889,"id":"CVE-2026-89594","ts":1789384320829,"field":"severity","old":"medium","new":"high"},{"seq":183437,"id":"CVE-2026-89594","ts":1789356675365,"field":"cvss","old":"7.8","new":"4.1"},{"seq":183436,"id":"CVE-2026-89594","ts":1789356675365,"field":"severity","old":"high","new":"medium"},{"seq":153412,"id":"CVE-2026-89594","ts":1789285350409,"field":"cvss","old":null,"new":"7.8"},{"seq":153411,"id":"CVE-2026-89594","ts":1789285350409,"field":"severity","old":"none","new":"high"},{"seq":147099,"id":"CVE-2026-89594","ts":1789270195165,"field":"cvss","old":null,"new":"4.1"},{"seq":147098,"id":"CVE-2026-89594","ts":1789270195165,"field":"severity","old":"none","new":"medium"},{"seq":108850,"id":"CVE-2026-89594","ts":1789183729248,"field":"cvss","old":null,"new":"4.1"},{"seq":108849,"id":"CVE-2026-89594","ts":1789183729248,"field":"severity","old":"none","new":"medium"}]}