---
id: CVE-2026-89594
title: 'hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device

  The OMAP SSI driver uses a synthetic HSI controller device allocated via
  hsi_alloc_controller(…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-909
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 <
    6a5426f56de98faf7886702f8720828bf346a48f
  - >-
    Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 <
    a4beb841f84e0e6ad5ff3d114f43ad30165572dd
  - >-
    Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 <
    9ecef057b7a7f165ce66eaf07cb4cf85d10ed9c7
  - >-
    Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 <
    9963a65be2befff82b5f5a7cfcd7ac4aca081c0b
  - >-
    Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 <
    e8d47e309c704df95816e7442f05947424d8b33f
  - >-
    Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 <
    4e019e5e247bfe877fdf288f2d6ec1b4c850c7c6
  - >-
    Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 <
    fbffbfdae55954213fea99c5c9856c48dc705019
  - >-
    Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 <
    e81250ec6b69248b00d38c523dc6a13efaf38aab
  - Linux 4e57482e8440fac7137832629109730ea4b267aa
  - Linux >= 5.9.2 < 5.10
  - Linux 5.10
published: '2026-09-11'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T08:49:26.718Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-89594'
references:
  - url: 'https://git.kernel.org/stable/c/6a5426f56de98faf7886702f8720828bf346a48f'
  - url: 'https://git.kernel.org/stable/c/a4beb841f84e0e6ad5ff3d114f43ad30165572dd'
  - url: 'https://git.kernel.org/stable/c/9ecef057b7a7f165ce66eaf07cb4cf85d10ed9c7'
  - url: 'https://git.kernel.org/stable/c/9963a65be2befff82b5f5a7cfcd7ac4aca081c0b'
  - url: 'https://git.kernel.org/stable/c/e8d47e309c704df95816e7442f05947424d8b33f'
  - url: 'https://git.kernel.org/stable/c/4e019e5e247bfe877fdf288f2d6ec1b4c850c7c6'
  - url: 'https://git.kernel.org/stable/c/fbffbfdae55954213fea99c5c9856c48dc705019'
  - url: 'https://git.kernel.org/stable/c/e81250ec6b69248b00d38c523dc6a13efaf38aab'
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89594.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-89594'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2532500'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-89594'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89594'
  - url: >-
      https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-89594.mbox
tags:
  - cve.org
  - csaf
  - vex
  - red-hat
  - score-dispute
epss: 0.00169
epssPercentile: 0.06191
scores:
  cna: 7.8
  vendor: 5.5
ingestedAt: '2026-09-14T15:23:07.451Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device

The OMAP SSI driver uses a synthetic HSI controller device allocated via
hsi_alloc_controller(), which does not go through the normal OF/platform
device initialization path.

As a result, the embedded struct device does not have a DMA mask
initialized by default.

After recent DMA API hardening changes, dma_map_sg() and related helpers
now require a valid dma_mask to be present, otherwise the driver may
crash or trigger warnings when attempting DMA mapping operations.

Fix this by explicitly initializing the DMA mask for the SSI controller
device and setting a 32-bit DMA mask, which matches the hardware
capabilities.

## Affected

- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 6a5426f56de98faf7886702f8720828bf346a48f`
- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < a4beb841f84e0e6ad5ff3d114f43ad30165572dd`
- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 9ecef057b7a7f165ce66eaf07cb4cf85d10ed9c7`
- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 9963a65be2befff82b5f5a7cfcd7ac4aca081c0b`
- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < e8d47e309c704df95816e7442f05947424d8b33f`
- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < 4e019e5e247bfe877fdf288f2d6ec1b4c850c7c6`
- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < fbffbfdae55954213fea99c5c9856c48dc705019`
- `Linux >= f959dcd6ddfd29235030e8026471ac1b022ad2b0 < e81250ec6b69248b00d38c523dc6a13efaf38aab`
- `Linux 4e57482e8440fac7137832629109730ea4b267aa`
- `Linux >= 5.9.2 < 5.10`
- `Linux 5.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · updated 2026-09-15 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-89594.json)