# CVE-2026-89594

## Summary

- **CVE ID:** CVE-2026-89594
- **Severity:** HIGH
- **CVSS Score:** 7.8 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
- **CWE:** N/A
- **Published:** Sep 11, 2026
- **Last Modified:** Sep 14, 2026

## Description

In the Linux kernel, the following vulnerability has been resolved:

hsi: omap_ssi_core: fix missing DMA mask setup for SSI controller device

The OMAP SSI driver uses a synthetic HSI controller device allocated via
hsi_alloc_controller(), which does not go through the normal OF/platform
device initialization path.

As a result, the embedded struct device does not have a DMA mask
initialized by default.

After recent DMA API hardening changes, dma_map_sg() and related helpers
now require a valid dma_mask to be present, otherwise the driver may
crash or trigger warnings when attempting DMA mapping operations.

Fix this by explicitly initializing the DMA mask for the SSI controller
device and setting a 32-bit DMA mask, which matches the hardware
capabilities.

## Affected Products

- Linux — Linux (f959dcd6ddfd29235030e8026471ac1b022ad2b0)
- Linux — Linux (4e57482e8440fac7137832629109730ea4b267aa)
- Linux — Linux (5.9.2)
- Linux — Linux (5.10)
- Linux — Linux (0)
- Linux — Linux (6.12.109)
- Linux — Linux (6.18.50)
- Linux — Linux (7.2.4)
- Linux — Linux (7.3-rc1)
- Linux — Linux (5.10.270)
- Linux — Linux (5.15.221)
- Linux — Linux (6.1.188)
- Linux — Linux (6.6.157)

## References

- [CNA](https://git.kernel.org/stable/c/e8d47e309c704df95816e7442f05947424d8b33f)
- [CNA](https://git.kernel.org/stable/c/4e019e5e247bfe877fdf288f2d6ec1b4c850c7c6)
- [CNA](https://git.kernel.org/stable/c/fbffbfdae55954213fea99c5c9856c48dc705019)
- [CNA](https://git.kernel.org/stable/c/e81250ec6b69248b00d38c523dc6a13efaf38aab)
- [CNA](https://git.kernel.org/stable/c/6a5426f56de98faf7886702f8720828bf346a48f)
- [CNA](https://git.kernel.org/stable/c/a4beb841f84e0e6ad5ff3d114f43ad30165572dd)
- [CNA](https://git.kernel.org/stable/c/9ecef057b7a7f165ce66eaf07cb4cf85d10ed9c7)
- [CNA](https://git.kernel.org/stable/c/9963a65be2befff82b5f5a7cfcd7ac4aca081c0b)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.16%
- **EPSS Percentile:** 6.0

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-18._