CVE-2026-89883

CVE-2026-89883

High · published September 16, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

media: rc: sunxi-cir: Unregister rc device on probe failure

After rc_register_device() succeeds, later probe failures must undo the

registration with rc_unregister_device(). The current error path jumps to

the allocation cleanup label and only calls rc_free_device(), leaving the

rc device registration and resources created by rc_register_device()

behind.

Add a registered-device unwind label for the IRQ lookup, IRQ request, and

hardware initialization failure paths. Keep rc_free_device() for failures

before rc_register_device() succeeds.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00169 · 5.9th percentile
Published
2026-09-16T15:16Z
References (7)
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:31Z
    media: rc: sunxi-cir: Unregister rc device on probe failure
    cvelistv5