CVE-2026-89977 accel/ethosu: check MMIO mapping errors in probe
A missing error check in the Ethos-U accelerator driver probe function can lead to a null pointer dereference and kernel crash.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-89977?
CVE-2026-89977 is a vulnerability in Linux, published on 16 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
accel/ethosu: check MMIO mapping errors in probe
devm_platform_ioremap_resource() returns an error pointer when the register resource cannot be mapped. ethosu_probe() stores it and continues until initialization dereferences it through MMIO accessors.
Return the mapping error before initializing the device.
Which versions are affected by CVE-2026-89977?
How do I fix CVE-2026-89977?
Apply the vendor's patch.
Is CVE-2026-89977 being exploited?
There is no known exploitation of CVE-2026-89977 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2026-89977, GHSA-c8v6-r4v4-jmq9, UBUNTU-CVE-2026-89977.