CVE-2026-89877

media: saa7164: fix cleanup on resource allocation failure

State: Published
Severity: 8.4 High
Published: Sep 16, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

media: saa7164: fix cleanup on resource allocation failure

saa7164_dev_setup() adds the device to the global saa7164_devlist before requesting the PCI BAR memory regions.

If get_resources() fails, saa7164_dev_setup() decrements the device count and returns an error, but leaves the device on saa7164_devlist. The probe error path then frees the device, leaving a dangling entry on the global list.

Reuse the existing MMIO mapping error path to remove the device from saa7164_devlist and decrement the device count before returning.

Also release BAR0 if it was successfully requested but the BAR2 request fails.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	443c1228d50518f3c550e1fef490a2c9d9246ce7 to before ac9d7ca8199c64c320ba8177e3c0f7b0deb7ff06Affected 443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 99bf01e2563f8bdfe5f25e489596cff455a35d6bAffected 443c1228d50518f3c550e1fef490a2c9d9246ce7 to before daa5b32cdf7db81a07ee2a91ce092a363e7754aaAffected 443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 77f216f8de6221efb6f6c471bc9e598f1879825bAffected 443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 69259c627009bf7621010ae9e997dad2dad3339cAffected 443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 4d2048466af9e2c960c5be6dcd317e3b657d268bAffected 443c1228d50518f3c550e1fef490a2c9d9246ce7 to before fc65623524b5bf23baddc6ae688d954fba0d5de2Affected 443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 28e84c6e2e6753ed238ea097b2842a32a6a6879bAffected
LinuxLinux	2.6.32Affected before 2.6.32Not affected 5.10.273 through 5.10.Not affected 5.15.224 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.51 through 6.18.Not affected 7.2.5 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

443c1228d50518f3c550e1fef490a2c9d9246ce7 to before ac9d7ca8199c64c320ba8177e3c0f7b0deb7ff06Affected
443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 99bf01e2563f8bdfe5f25e489596cff455a35d6bAffected
443c1228d50518f3c550e1fef490a2c9d9246ce7 to before daa5b32cdf7db81a07ee2a91ce092a363e7754aaAffected
443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 77f216f8de6221efb6f6c471bc9e598f1879825bAffected
443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 69259c627009bf7621010ae9e997dad2dad3339cAffected
443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 4d2048466af9e2c960c5be6dcd317e3b657d268bAffected
443c1228d50518f3c550e1fef490a2c9d9246ce7 to before fc65623524b5bf23baddc6ae688d954fba0d5de2Affected
443c1228d50518f3c550e1fef490a2c9d9246ce7 to before 28e84c6e2e6753ed238ea097b2842a32a6a6879bAffected

LinuxLinux

2.6.32Affected
before 2.6.32Not affected
5.10.273 through 5.10.*Not affected
5.15.224 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.51 through 6.18.*Not affected
7.2.5 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.