CVE-2026-89992

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-89992
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89992.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-89992
Downstream
Published
2026-09-16T10:33:05Z
Modified
2026-09-18T03:48:34Z
Severity
  • 8.4 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
cpuidle: dt_idle_genpd: kfree() the original name allocation
Details

In the Linux kernel, the following vulnerability has been resolved:

cpuidle: dt_idle_genpd: kfree() the original name allocation

dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the start of the allocation.

Copy the basename instead.

Database specific 
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89992.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
9d976d6721dfb525b81ce981e1363c70c0975aab
Fixed
1312ae33b91430ec99e69cd3d47f0e50a4ebf54b
Fixed
a38caa9ed0d5c61c17d88393b14b292199289c1f
Fixed
09d002c8fb0261d35ce9d8a705de5db034ee90b8
Fixed
b519dfce1998c323e54a56f911cf708d9ba0e076
Fixed
3394c7ba23336bdb7ece29127130fd01731d42d8
Fixed
2b0ac85512b7f67479127b2713254490662eb13d

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89992.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.18.0
Fixed
6.1.188
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.157
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.110
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.51
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.5

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89992.json"