OCTOBER 13, 2026
Live Feed
Back to database
Case File

CVE-2026-89992

HIGH · CVSS 8.4 EPSS 0.20%

Source: NVD + CISA KEV + EPSS · Published 2026-09-16 · Last synced 2026-10-13

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's cpuidle component, specifically in the handling of memory allocation and deallocation for node names. An improper use of memory management functions could lead to potential memory corruption or crashes, impacting system stability. Linux system administrators and developers should prioritize this issue to ensure the integrity and reliability of their systems.

CVE
CVE-2026-89992
Severity
HIGH
CVSS
8.4
EPSS
0.20%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: cpuidle: dt_idle_genpd: kfree() the original name allocation dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the start of the allocation. Copy the basename instead.