CVE-2026-89572

Source
https://cve.org/CVERecord?id=CVE-2026-89572
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89572.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89572
Downstream
Published
2026-09-11T19:44:41Z
Modified
2026-09-13T03:47:19Z
Summary
cpufreq: apple-soc: Fix OPP table cleanup
Details

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: apple-soc: Fix OPP table cleanup

apple_soc_cpufreq_init() adds OPP tables from firmware, but some failure paths do not remove them. The driver also uses dev_pm_opp_remove_all_dynamic(), which is not the right cleanup helper for OPP tables loaded from firmware.

Use the cpumask OPP helper after the policy CPU mask has been populated. Pair it with the matching cpumask remove helper on failure paths and in apple_soc_cpufreq_exit(). This also removes the separate dev_pm_opp_set_sharing_cpus() call, as the cpumask helper loads the DT OPP tables for all CPUs in the policy.

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89572.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
6286bbb40576ffadfde206c332b61345c19af57f
Fixed
7c19b94c625dc7042b0a7dff4c8da158358ffa2c
Fixed
36c55d118d5ecd2fb444f52802955903937b9ccd
Fixed
d87cb889dc7ab1f2deecadf2a5e9023184bd7900

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89572.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.4

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89572.json"