CVE-2026-89437

Received Received - Intake

Memory Leak in Linux Kernel platform/x86 int1092

Publication date: 2026-09-11

Last updated on: 2026-09-14

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: platform/x86: int1092: Fix potential memory leak in sar_probe() The memory allocated for device_mode_info in parse_package() called by sar_get_data() is not freed in some of the error paths in sar_probe(). Fix that by converting to use device managed allocations.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-11

Last Modified

2026-09-14

Generated

2026-10-02

AI Q&A

2026-09-12

EPSS Evaluated

2026-10-01

NVD

CVE-2026-89437

EUVD

EUVD-2026-76343

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability is a memory leak in the Linux kernel's platform/x86 subsystem, specifically in the int1092 driver. When the sar_probe() function encounters certain error conditions, memory allocated for device_mode_info in parse_package() is not properly freed, leading to a gradual loss of available system memory.

Detection Guidance

This vulnerability is specific to the Linux kernel's platform/x86 subsystem and may not have direct network detection methods. Check kernel logs for errors related to int1092 or sar_probe() using commands like dmesg | grep int1092 or journalctl -k | grep sar_probe. Ensure your kernel version includes the fix.

Impact Analysis

The memory leak could cause system instability over time as available memory is gradually consumed. This may lead to performance degradation, application crashes, or system freezes if the leak continues unchecked. Systems with long uptimes are most vulnerable.

Compliance Impact

This vulnerability involves a potential memory leak in the Linux kernel's platform/x86 subsystem, specifically in the int1092 driver. Memory leaks can lead to resource exhaustion, which may indirectly impact system stability and availability. However, there is no direct evidence in the provided context that this vulnerability specifically affects compliance with standards like GDPR or HIPAA.

Mitigation Strategies

Update your Linux kernel to the latest stable version that includes the fix for CVE-2026-89437. Reboot the system after applying the update to ensure the patched kernel is active.

Hi! I’m here to help you understand CVE-2026-89437. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70