SEPTEMBER 18, 2026
Live Feed
Back to database
Case File

CVE-2026-89437

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-18

CyberRota Analysis

AI-Generated

A memory leak vulnerability exists in the Linux kernel's sar_probe() function, where memory allocated for device_mode_info is not properly freed during certain error conditions. This could lead to increased memory consumption and potential denial of service if exploited. Linux system administrators and developers should prioritize this fix to ensure system stability and resource management.

CVE
CVE-2026-89437
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in sar_probe() The memory allocated for device_mode_info in parse_package() called by sar_get_data() is not freed in some of the error paths in sar_probe(). Fix that by converting to use device managed allocations.