SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89626

HIGH · CVSS 8.8 EPSS 0.32%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of sysfs groups for custom sensors, where failure in creating a sysfs group does not clean up previously created groups, potentially leading to memory access issues. This oversight could allow unauthorized access to sensor data or lead to system instability. Linux system administrators and developers working with custom sensors should prioritize addressing this issue to ensure system integrity and security.

CVE
CVE-2026-89626
Severity
HIGH
CVSS
8.8
EPSS
0.32%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hid_sensor_custom_add_attributes() creates one sysfs group for each custom sensor field. If sysfs_create_group() fails after some groups have already been created, the function returns the error without removing the previously created groups. Add a local unwind path to remove the groups that were already created. With enable_sensor exposed only after the field attributes are ready, this path can free sensor_inst->fields without leaving enable_sensor able to access pointers into that array.