UBUNTU-CVE-2026-89451: Medium severity ubuntu/linux-hwe-edge vulnerability

In the Linux kernel, the following vulnerability has been resolved: iommu/sva: Set handle->dev before the SVA handle is visible iommuattachdevicepasid() installs the new SVA attach handle in the group PASID lookup before iommusvabinddevice() returns. A concurrent bind can therefore find and reuse the same handle after iommusvalock is dropped. handle->dev was initialized after dropping iommusvalock. This leaves a window where a racing bind can return a handle whose dev pointer is still NULL. A subsequent iommusvaunbinddevice() can then dereference it via handle->dev->iommugroup. Initialize handle->dev before releasing iommusvalock so any visible SVA handle is fully initialized.