CVE-2026-89992

cpuidle: dt_idle_genpd: kfree() the original name allocation

State: Published
Severity: 8.4 High
Published: Sep 16, 2026
Updated: Oct 19, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

cpuidle: dt_idle_genpd: kfree() the original name allocation

dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the start of the allocation.

Copy the basename instead.

Scores

CVSS	Score	Vector	Source
3.1	8.4 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	9d976d6721dfb525b81ce981e1363c70c0975aab to before 1312ae33b91430ec99e69cd3d47f0e50a4ebf54bAffected 9d976d6721dfb525b81ce981e1363c70c0975aab to before a38caa9ed0d5c61c17d88393b14b292199289c1fAffected 9d976d6721dfb525b81ce981e1363c70c0975aab to before 09d002c8fb0261d35ce9d8a705de5db034ee90b8Affected 9d976d6721dfb525b81ce981e1363c70c0975aab to before b519dfce1998c323e54a56f911cf708d9ba0e076Affected 9d976d6721dfb525b81ce981e1363c70c0975aab to before 3394c7ba23336bdb7ece29127130fd01731d42d8Affected 9d976d6721dfb525b81ce981e1363c70c0975aab to before 2b0ac85512b7f67479127b2713254490662eb13dAffected
LinuxLinux	5.18Affected before 5.18Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.110 through 6.12.Not affected 6.18.51 through 6.18.Not affected 7.2.5 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

9d976d6721dfb525b81ce981e1363c70c0975aab to before 1312ae33b91430ec99e69cd3d47f0e50a4ebf54bAffected
9d976d6721dfb525b81ce981e1363c70c0975aab to before a38caa9ed0d5c61c17d88393b14b292199289c1fAffected
9d976d6721dfb525b81ce981e1363c70c0975aab to before 09d002c8fb0261d35ce9d8a705de5db034ee90b8Affected
9d976d6721dfb525b81ce981e1363c70c0975aab to before b519dfce1998c323e54a56f911cf708d9ba0e076Affected
9d976d6721dfb525b81ce981e1363c70c0975aab to before 3394c7ba23336bdb7ece29127130fd01731d42d8Affected
9d976d6721dfb525b81ce981e1363c70c0975aab to before 2b0ac85512b7f67479127b2713254490662eb13dAffected

LinuxLinux

5.18Affected
before 5.18Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.110 through 6.12.*Not affected
6.18.51 through 6.18.*Not affected
7.2.5 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.