CVE-2026-89933

CVE-2026-89933

published September 16, 2026

CVSS
—
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

When the device is enumerated through its ACPI HID (IFX3100),

i2c_client_get_device_id() returns NULL: the ACPI-derived client name

does not match the driver's i2c_device_id table. dps310_probe() then

dereferences that NULL pointer in "iio->name = id->name" and crashes the

kernel during probe.

The IIO device name is always "dps310", so set it directly and drop the

now-unused device-id lookup.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Published
2026-09-16T15:17Z
References (5)
https://git.kernel.org/stable/c/26e9213898fc949923188ef0aeea31fc87708836 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3fa189573cca284ae663bfd2d5b9ed755bec5e9d · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/7ded5b76ec2df6a3fb1bfde0d1869cde363fef30 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a32a39da18e01b20c2ab65af9be34dc870187382 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bc7b09e701b4175fc683b579fcdef3bfac809239 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:32Z
    iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
    cvelistv5