CVE-2026-89626

High

Description

In the Linux kernel, the following vulnerability has been resolved: HID: sensor: custom: Fix field sysfs group cleanup on failure hid_sensor_custom_add_attributes() creates one sysfs group for each custom sensor field. If sysfs_create_group() fails after some groups have already been created, the function returns the error without removing the previously created groups. Add a local unwind path to remove the groups that were already created. With enable_sensor exposed only after the field attributes are ready, this path can free sensor_inst->fields without leaving enable_sensor able to access pointers into that array.

SeverityHigh
CVSS8.8
Exploit probability—
ProductLinux
PublishedSep 11, 2026
First seenSep 11, 2026

How to fix

Update
  • Linux Linux416194933af63bd58d03b7605b1ebc1711186838, d0e15091e88d18e30b67daf85b88f6528bb9bf41, 10b05fafff932e325896d59dde40938954ab4577, 2409779f3096fcef41bcf57b5f4887d0fa0dc8dd, 79154fad98ee843e5363940841e2d831503c190a, f3f37b937a6ea2a00fb5e6189e74f855caa43eb5, d96f8958d4469ac02d9c563686cdd968005b944d, 3789d0802ddb4b3be04062caf4bfadd23496e9a7 or later

Affected products

ProductAffected versionsFixed in
Linux Linux4a7de0519df5e8fb89cef6ee062330ffe4b50a4d ≤ v < 416194933af63bd58d03b7605b1ebc1711186838, 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d ≤ v < d0e15091e88d18e30b67daf85b88f6528bb9bf41, 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d ≤ v < 10b05fafff932e325896d59dde40938954ab4577, 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d ≤ v < 2409779f3096fcef41bcf57b5f4887d0fa0dc8dd, 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d ≤ v < 79154fad98ee843e5363940841e2d831503c190a, 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d ≤ v < f3f37b937a6ea2a00fb5e6189e74f855caa43eb5, 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d ≤ v < d96f8958d4469ac02d9c563686cdd968005b944d, 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d ≤ v < 3789d0802ddb4b3be04062caf4bfadd23496e9a7, 4.1416194933af63bd58d03b7605b1ebc1711186838, d0e15091e88d18e30b67daf85b88f6528bb9bf41, 10b05fafff932e325896d59dde40938954ab4577, 2409779f3096fcef41bcf57b5f4887d0fa0dc8dd, 79154fad98ee843e5363940841e2d831503c190a, f3f37b937a6ea2a00fb5e6189e74f855caa43eb5, d96f8958d4469ac02d9c563686cdd968005b944d, 3789d0802ddb4b3be04062caf4bfadd23496e9a7

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.