CVE-2026-89572

CVE-2026-89572

published September 12, 2026

CVSS
—
EPSS
0%
Percentile
5.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

cpufreq: apple-soc: Fix OPP table cleanup

apple_soc_cpufreq_init() adds OPP tables from firmware, but

some failure paths do not remove them. The driver also uses

dev_pm_opp_remove_all_dynamic(), which is not the right cleanup

helper for OPP tables loaded from firmware.

Use the cpumask OPP helper after the policy CPU mask has been

populated. Pair it with the matching cpumask remove helper on

failure paths and in apple_soc_cpufreq_exit(). This also removes

the separate dev_pm_opp_set_sharing_cpus() call, as the cpumask

helper loads the DT OPP tables for all CPUs in the policy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.8th percentile
Published
2026-09-12T00:19Z
References (5)
EPSS history
Timeline
  • 13 SEP 03:23Z
    EPSS moved — → 0%
    epss
  • 11 SEP 19:44Z
    cpufreq: apple-soc: Fix OPP table cleanup
    cvelistv5