CVE-2026-89512

remoteproc: scp: Fix device reference leak on failed lookup

State: Published
Severity: Not scored
Published: Sep 11, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

remoteproc: scp: Fix device reference leak on failed lookup

Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound.

Note that holding a reference to a device does not prevent its driver data from going away.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	63c13d61eafe4606f1c16c54da40c4eee78e9edf to before f1c9512ae072996647fb829c6402348d1b72af39Affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf to before d6ef9060775483bcf57291cbacbc0fe89b5857daAffected 63c13d61eafe4606f1c16c54da40c4eee78e9edf to before 554689ff2d7561d91011e69a8bfcef1b71901b2bAffected 63c13d61eafe4606f1c16c54da40c4eee78e9edf to before 6ca338cf2d386fd701b2dc27a2cd4c067a45d545Affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf to before f794c930d8238e370fd61fcb12cc301ae098231bAffected 63c13d61eafe4606f1c16c54da40c4eee78e9edf to before c7e32814a6bf20f792d05f0bc9f94f0606311bc6Affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf to before 440bcb0948a12c9104b6dcca99a2cfb0db49b22aAffected 63c13d61eafe4606f1c16c54da40c4eee78e9edf to before 22f9efb3ae07f966a1901d929d16df1388cce65cAffected
LinuxLinux	5.6Affected before 5.6Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

63c13d61eafe4606f1c16c54da40c4eee78e9edf to before f1c9512ae072996647fb829c6402348d1b72af39Affected
63c13d61eafe4606f1c16c54da40c4eee78e9edf to before d6ef9060775483bcf57291cbacbc0fe89b5857daAffected
63c13d61eafe4606f1c16c54da40c4eee78e9edf to before 554689ff2d7561d91011e69a8bfcef1b71901b2bAffected
63c13d61eafe4606f1c16c54da40c4eee78e9edf to before 6ca338cf2d386fd701b2dc27a2cd4c067a45d545Affected
63c13d61eafe4606f1c16c54da40c4eee78e9edf to before f794c930d8238e370fd61fcb12cc301ae098231bAffected
63c13d61eafe4606f1c16c54da40c4eee78e9edf to before c7e32814a6bf20f792d05f0bc9f94f0606311bc6Affected
63c13d61eafe4606f1c16c54da40c4eee78e9edf to before 440bcb0948a12c9104b6dcca99a2cfb0db49b22aAffected
63c13d61eafe4606f1c16c54da40c4eee78e9edf to before 22f9efb3ae07f966a1901d929d16df1388cce65cAffected

LinuxLinux

5.6Affected
before 5.6Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.