{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89512", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.717Z", "datePublished": "2026-09-11T19:43:57.286Z", "dateUpdated": "2026-09-11T19:43:57.286Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-09-11T19:43:57.286Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: scp: Fix device reference leak on failed lookup\n\nMake sure to drop the reference taken to the SCP device when attempting\nto look up its driver data before the driver has been bound.\n\nNote that holding a reference to a device does not prevent its driver\ndata from going away."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/remoteproc/mtk_scp.c"], "versions": [{"version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf", "lessThan": "f794c930d8238e370fd61fcb12cc301ae098231b", "status": "affected", "versionType": "git"}, {"version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf", "lessThan": "c7e32814a6bf20f792d05f0bc9f94f0606311bc6", "status": "affected", "versionType": "git"}, {"version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf", "lessThan": "440bcb0948a12c9104b6dcca99a2cfb0db49b22a", "status": "affected", "versionType": "git"}, {"version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf", "lessThan": "22f9efb3ae07f966a1901d929d16df1388cce65c", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/remoteproc/mtk_scp.c"], "versions": [{"version": "5.6", "status": "affected"}, {"version": "0", "lessThan": "5.6", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.109", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.50", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3-rc1", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.12.109"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "6.18.50"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "5.6", "versionEndExcluding": "7.3-rc1"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b"}, {"url": "https://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6"}, {"url": "https://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a"}, {"url": "https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c"}], "title": "remoteproc: scp: Fix device reference leak on failed lookup", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/remoteproc/mtk_scp.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f794c930d8238e370fd61fcb12cc301ae098231b", "status": "affected", "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf", "versionType": "git"}, {"lessThan": "c7e32814a6bf20f792d05f0bc9f94f0606311bc6", "status": "affected", "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf", "versionType": "git"}, {"lessThan": "440bcb0948a12c9104b6dcca99a2cfb0db49b22a", "status": "affected", "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf", "versionType": "git"}, {"lessThan": "22f9efb3ae07f966a1901d929d16df1388cce65c", "status": "affected", "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/remoteproc/mtk_scp.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "5.6"}, {"lessThan": "5.6", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.109", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.50", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3-rc1", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: scp: Fix device reference leak on failed lookup\n\nMake sure to drop the reference taken to the SCP device when attempting\nto look up its driver data before the driver has been bound.\n\nNote that holding a reference to a device does not prevent its driver\ndata from going away."}], "id": "CVE-2026-89512", "lastModified": "2026-09-11T20:19:33.647", "metrics": {}, "published": "2026-09-11T20:19:33.647", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: Denial of Service in remoteproc SCP due to reference leak", "id": "2532041", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532041"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.4", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "status": "draft"}, "cwe": "CWE-772", "details": ["A flaw was found in the Linux kernel's remoteproc SCP component. This vulnerability involves a device reference leak, where the system fails to properly release a reference to a device during a driver data lookup. This occurs specifically before the driver has been fully bound. A local attacker could potentially exploit this issue to cause resource exhaustion, leading to a Denial of Service (DoS) condition."], "name": "CVE-2026-89512", "package_state": [{"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-8", "product_name": "Red Hat OpenShift Container Platform 4"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Fix deferred", "package_name": "openshift/ose-rhel-coreos-9", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2026-09-11T19:43:57Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89512\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89512\nhttps://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c\nhttps://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a\nhttps://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6\nhttps://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b"], "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c13d61eafe4606f1c16c54da40c4eee78e9edf,f794c930d8238e370fd61fcb12cc301ae098231b)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c13d61eafe4606f1c16c54da40c4eee78e9edf,c7e32814a6bf20f792d05f0bc9f94f0606311bc6)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c13d61eafe4606f1c16c54da40c4eee78e9edf,440bcb0948a12c9104b6dcca99a2cfb0db49b22a)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[63c13d61eafe4606f1c16c54da40c4eee78e9edf,22f9efb3ae07f966a1901d929d16df1388cce65c)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "5.6"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,5.6)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.12.109,7.0.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.50,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.4,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-12T03:45:07.949890+00:00", "updated": "2026-09-12T14:15:16.200548+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}