CVE-2026-89992

Summary

In the Linux kernel, the following vulnerability has been resolved:

cpuidle: dt_idle_genpd: kfree() the original name allocation

dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the start of the allocation.

Copy the basename instead.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux9d976d6721dfb525b81ce981e1363c70c0975aab < 1312ae33b91430ec99e69cd3d47f0e50a4ebf54baffected
LinuxLinux9d976d6721dfb525b81ce981e1363c70c0975aab < a38caa9ed0d5c61c17d88393b14b292199289c1faffected
LinuxLinux9d976d6721dfb525b81ce981e1363c70c0975aab < 09d002c8fb0261d35ce9d8a705de5db034ee90b8affected
LinuxLinux9d976d6721dfb525b81ce981e1363c70c0975aab < b519dfce1998c323e54a56f911cf708d9ba0e076affected
LinuxLinux9d976d6721dfb525b81ce981e1363c70c0975aab < 3394c7ba23336bdb7ece29127130fd01731d42d8affected
LinuxLinux9d976d6721dfb525b81ce981e1363c70c0975aab < 2b0ac85512b7f67479127b2713254490662eb13daffected
LinuxLinux5.18affected
LinuxLinux0 < 5.18unaffected
LinuxLinux6.1.188 <= 6.1.*unaffected
LinuxLinux6.6.157 <= 6.6.*unaffected
LinuxLinux6.12.110 <= 6.12.*unaffected
LinuxLinux6.18.51 <= 6.18.*unaffected
LinuxLinux7.2.5 <= 7.2.*unaffected
LinuxLinux7.3-rc2 <= *unaffected

Weaknesses

References