{"id":"CVE-2026-89976","published":"2026-09-16T11:17:08.450","lastModified":"2026-09-16T11:17:08.450","description":"In the Linux kernel, the following vulnerability has been resolved:\n\naccel/ethosu: fix job completion fence cleanup\n\nethosu_ioctl_submit_job() allocates done_fence before validating buffer\nhandles. Errors after allocation call ethosu_job_err_cleanup(), which frees\nthe job but leaks the uninitialized fence.\n\nA scheduler dependency error also lets ethosu_job_run() return before\ndma_fence_init(). Normal cleanup then passes a zeroed refcount to\ndma_fence_put().\n\nRelease done_fence in the common cleanup path and use\ndma_fence_was_initialized() to distinguish initialized fences from raw\nallocations.\n\n[robh: also fix goto]","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/2d2a3adc91950f9a18829dadc7317fb5180a15c5","tags":[]},{"url":"https://git.kernel.org/stable/c/b3e0f79af1f27339d8d2527c02cc3e8397c2f69f","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}