CVE-2026-89721 Linux CVE debrief

Who should care

Linux kernel maintainers and users, cybersecurity teams, and operators of affected systems should assess exposure and update to fixed versions to prevent potential oops and denial of service. This includes reviewing compensating controls, monitoring, and detection for exposed assets.

Why it matters

Linux kernel maintainers and users should assess exposure and update to fixed versions to prevent potential oops and denial of service.

• Potential oops when accessing PHY registers
• Denial of service through debugfs interface

Technical summary

The Linux kernel's PHY register block has a 64KB size with a 4-byte register stride. The max_register value is set to 0x10000, which is one register past the end of the mapping. Accessing this register through the regmap debugfs interface results in an oops. The oops fires with the regmap lock held, so later PHY operations deadlock. This issue affects Linux kernel maintainers and users who need to assess exposure and update to fixed versions to prevent potential oops and denial of service through the debugfs interface.

Defensive priority

Assess Linux kernel versions and update to fixed versions if necessary.

Recommended defensive actions

• Assess Linux kernel versions for exposure
• Update to fixed versions if necessary
• Monitor regmap debugfs interface access
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The Linux kernel's PHY register block has a 64KB size with a 4-byte register stride. The max_register value is set to 0x10000, which is one register past the end of the mapping. Accessing this register through the regmap debugfs interface results in an oops. The oops fires with the regmap lock held, so later PHY operations deadlock. Source confidence is limited to public CVE details and associated source references.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.