CVE-2026-89437

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

platform/x86: int1092: Fix potential memory leak in sar_probe()

The memory allocated for device_mode_info in parse_package() called by sar_get_data() is not freed in some of the error paths in sar_probe(). Fix that by converting to use device managed allocations.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= dcfbd31ef4bcf6ceb373911faa4a5299e0547702, < ef8eb7613db672def645f19387d7daead5c29a0e; >= dcfbd31ef4bcf6ceb373911faa4a5299e0547702, < d680ce2b39f9a635365746d0ada3d6a6d861789b; >= dcfbd31ef4bcf6ceb373911faa4a5299e0547702, < 4bdbb7f1045820aa8fd87d84db6b26c01049a005; >= dcfbd31ef4bcf6ceb373911faa4a5299e0547702, < 08dab7065f9369dd0a0aa740071bcd884c4848b0; >= dcfbd31ef4bcf6ceb373911faa4a5299e0547702, < 582b82e573a059be9319bb16b84c45d0ef66f471; >= dcfbd31ef4bcf6ceb373911faa4a5299e0547702, < 30c906cff490c3601ee9ff110fe8115fabe75fd4
LinuxLinux5.15

References

Timeline

Published
Sep 11, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-89438In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate logical CPU id and clos id Validate max CCVE-2026-89439In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Add a NULL check for sst_inst[] To be consistent wCVE-2026-89444.3The Plugin for Google Analytics by IO technologies plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and iCVE-2026-894407.8In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: stop card-detect handling on probe failure request_irqCVE-2026-894417.8In the Linux kernel, the following vulnerability has been resolved: mmc: via-sdmmc: cancel card-detect work on remove Disabling the deviceCVE-2026-894427.8In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate socket ID in clos_assoc ioctl isst_if_cloCVE-2026-894437.1In the Linux kernel, the following vulnerability has been resolved: platform/x86: ISST: Validate level in perf mask ioctls isst_if_get_perCVE-2026-89444In the Linux kernel, the following vulnerability has been resolved: platform/x86: dell-wmi-sysman: Don't hex dump attribute security bufferCVE-2026-894458.8In the Linux kernel, the following vulnerability has been resolved: iommufd: Fix UAF in selftest IOPF reporting IOMMUFD selftest TRIGGER_ICVE-2026-89446In the Linux kernel, the following vulnerability has been resolved: iommufd: Release current IOAS on xa_store() failure iommufd_take_all_iCVE-2026-89447In the Linux kernel, the following vulnerability has been resolved: iommufd: Avoid locking internal accesses during unmap iommufd_access_nCVE-2026-894489.3In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Force requesting ACS when tboot is enabled Currently the c