CVE-2026-89626

Summary

In the Linux kernel, the following vulnerability has been resolved:

HID: sensor: custom: Fix field sysfs group cleanup on failure

hid_sensor_custom_add_attributes() creates one sysfs group for each custom sensor field. If sysfs_create_group() fails after some groups have already been created, the function returns the error without removing the previously created groups.

Add a local unwind path to remove the groups that were already created. With enable_sensor exposed only after the field attributes are ready, this path can free sensor_inst->fields without leaving enable_sensor able to access pointers into that array.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux4a7de0519df5e8fb89cef6ee062330ffe4b50a4d < 79154fad98ee843e5363940841e2d831503c190aaffected
LinuxLinux4a7de0519df5e8fb89cef6ee062330ffe4b50a4d < f3f37b937a6ea2a00fb5e6189e74f855caa43eb5affected
LinuxLinux4a7de0519df5e8fb89cef6ee062330ffe4b50a4d < d96f8958d4469ac02d9c563686cdd968005b944daffected
LinuxLinux4a7de0519df5e8fb89cef6ee062330ffe4b50a4d < 3789d0802ddb4b3be04062caf4bfadd23496e9a7affected
LinuxLinux4.1affected
LinuxLinux0 < 4.1unaffected
LinuxLinux6.12.109 <= 6.12.*unaffected
LinuxLinux6.18.50 <= 6.18.*unaffected
LinuxLinux7.2.4 <= 7.2.*unaffected
LinuxLinux7.3-rc1 <= *unaffected

Weaknesses

References