CVE-2026-89597

fbdev: uvesafb: unregister connector callback on init failure

State: Published
Severity: 7.8 High
Published: Sep 11, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

fbdev: uvesafb: unregister connector callback on init failure

uvesafb_init() registers the v86d connector callback before registering the platform driver. If platform_driver_register() fails, the function returns the error directly and leaves the connector callback registered.

The later platform-device failure path already unregisters the callback. Add the same cleanup before the final return when platform-driver registration fails.

This issue was identified during our ongoing static-analysis research while reviewing kernel code.

Scores

CVSS	Score	Vector	Source
3.1	7.8 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	8bdb3a2d7df48b861972c4bfb58490853a228f51 to before b149f77d04082a9da75944cdc488becb0e35258fAffected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 0352fdac3cbf11e3b323322ff8cd95e20cbf5cd7Affected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 17518e7123f7ef01b1155064dc01f2087583908eAffected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 9eb7b3cbe99c9c0edbff69eb155c723e30983c22Affected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 9f8a822b44c42502f105cf6574f4867067eecdd0Affected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 466a8af0dee2cf745307155e26884e19a37b7e15Affected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 9e768ae51426af2034d479133cfd73010d641b1aAffected 8bdb3a2d7df48b861972c4bfb58490853a228f51 to before de8db23aa7c337e606fca9faf48b3ba72968597aAffected
LinuxLinux	2.6.24Affected before 2.6.24Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

8bdb3a2d7df48b861972c4bfb58490853a228f51 to before b149f77d04082a9da75944cdc488becb0e35258fAffected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 0352fdac3cbf11e3b323322ff8cd95e20cbf5cd7Affected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 17518e7123f7ef01b1155064dc01f2087583908eAffected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 9eb7b3cbe99c9c0edbff69eb155c723e30983c22Affected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 9f8a822b44c42502f105cf6574f4867067eecdd0Affected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 466a8af0dee2cf745307155e26884e19a37b7e15Affected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before 9e768ae51426af2034d479133cfd73010d641b1aAffected
8bdb3a2d7df48b861972c4bfb58490853a228f51 to before de8db23aa7c337e606fca9faf48b3ba72968597aAffected

LinuxLinux

2.6.24Affected
before 2.6.24Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.