OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89883

HIGH · CVSS 7.8 EPSS 0.18%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of remote control (rc) device registration, specifically during probe failures. If the registration succeeds but subsequent hardware initialization fails, the system fails to properly unregister the device, potentially leading to resource leaks and undefined behavior. Linux kernel maintainers and developers working on systems that utilize remote control devices should prioritize addressing this issue to ensure system stability and resource management.

CVE
CVE-2026-89883
Severity
HIGH
CVSS
7.8
EPSS
0.18%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe failure After rc_register_device() succeeds, later probe failures must undo the registration with rc_unregister_device(). The current error path jumps to the allocation cleanup label and only calls rc_free_device(), leaving the rc device registration and resources created by rc_register_device() behind. Add a registered-device unwind label for the IRQ lookup, IRQ request, and hardware initialization failure paths. Keep rc_free_device() for failures before rc_register_device() succeeds.