CVE-2026-89886

CVE CVE-2026-89886EUVD EUVD-2026-80486Published 2026-09-16T10:31:50.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: media: intel/ipu6: fix async notifier cleanup leak on parse error isys_notifier_init() calls v4l2_async_nf_init() and then adds fwnode remote subdevs in a loop with v4l2_async_nf_add_fwnode_remote(). If an endpoint parse or add fails partway through the loop, it jumps to err_parse and returns without calling v4l2_async_nf_cleanup(), leaking every v4l2_async_connection already added to the notifier's waiting list. The register-failure path just below already cleans up correctly, and the caller only tears the notifier down (isys_notifier_cleanup()) once isys_notifier_init() has returned success. Clean up the notifier on the parse error path too.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

• Linux — Linux f50c4ca0a82003b8a542c3332fd292cf1bc355a2 <27b7997be552ee37b3e01beacfeb4131f1bebb5f; patch: 6.18.51; patch: 0; f50c4ca0a82003b8a542c3332fd292cf1bc355a2 <abb1f808ceab5a3275f8a6b4e37cff17f9f781c1; patch: 7.3-rc1; patch: 6.12.110; patch: 7.2.5; 6.10; f50c4ca0a82003b8a542c3332fd292cf1bc355a2 <eee6069e4e9511e814a33a75e403f7e863f70394; f50c4ca0a82003b8a542c3332fd292cf1bc355a2 <dd5943aedbe4d7eb46158cb35078257733ac48b6

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

• Linux — Linux

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.