CVE-2026-89877

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89877
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89877.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89877
Downstream
Published
2026-09-16T10:31:44Z
Modified
2026-09-18T03:48:33Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
media: saa7164: fix cleanup on resource allocation failure
Details

In the Linux kernel, the following vulnerability has been resolved:

media: saa7164: fix cleanup on resource allocation failure

saa7164_dev_setup() adds the device to the global saa7164_devlist before requesting the PCI BAR memory regions.

If get_resources() fails, saa7164_dev_setup() decrements the device count and returns an error, but leaves the device on saa7164_devlist. The probe error path then frees the device, leaving a dangling entry on the global list.

Reuse the existing MMIO mapping error path to remove the device from saa7164_devlist and decrement the device count before returning.

Also release BAR0 if it was successfully requested but the BAR2 request fails.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89877.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
443c1228d50518f3c550e1fef490a2c9d9246ce7
Fixed
daa5b32cdf7db81a07ee2a91ce092a363e7754aa
Fixed
77f216f8de6221efb6f6c471bc9e598f1879825b
Fixed
69259c627009bf7621010ae9e997dad2dad3339c
Fixed
4d2048466af9e2c960c5be6dcd317e3b657d268b
Fixed
fc65623524b5bf23baddc6ae688d954fba0d5de2
Fixed
28e84c6e2e6753ed238ea097b2842a32a6a6879b

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89877.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.6.32
Fixed
6.1.188
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89877.json"