CVE-2026-89512 (GCVE-0-2026-89512)
Vulnerability from cvelistv5
Published
2026-09-11 19:43
Modified
2026-10-19 08:48
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a device does not prevent its driver data from going away.
References
Impacted products
Vendor Product Version
Linux Linux Version: 63c13d61eafe4606f1c16c54da40c4eee78e9edf
Version: 63c13d61eafe4606f1c16c54da40c4eee78e9edf
Version: 63c13d61eafe4606f1c16c54da40c4eee78e9edf
Version: 63c13d61eafe4606f1c16c54da40c4eee78e9edf
Version: 63c13d61eafe4606f1c16c54da40c4eee78e9edf
Version: 63c13d61eafe4606f1c16c54da40c4eee78e9edf
Version: 63c13d61eafe4606f1c16c54da40c4eee78e9edf
Version: 63c13d61eafe4606f1c16c54da40c4eee78e9edf
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/remoteproc/mtk_scp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "f1c9512ae072996647fb829c6402348d1b72af39",
              "status": "affected",
              "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf",
              "versionType": "git"
            },
            {
              "lessThan": "d6ef9060775483bcf57291cbacbc0fe89b5857da",
              "status": "affected",
              "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf",
              "versionType": "git"
            },
            {
              "lessThan": "554689ff2d7561d91011e69a8bfcef1b71901b2b",
              "status": "affected",
              "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf",
              "versionType": "git"
            },
            {
              "lessThan": "6ca338cf2d386fd701b2dc27a2cd4c067a45d545",
              "status": "affected",
              "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf",
              "versionType": "git"
            },
            {
              "lessThan": "f794c930d8238e370fd61fcb12cc301ae098231b",
              "status": "affected",
              "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf",
              "versionType": "git"
            },
            {
              "lessThan": "c7e32814a6bf20f792d05f0bc9f94f0606311bc6",
              "status": "affected",
              "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf",
              "versionType": "git"
            },
            {
              "lessThan": "440bcb0948a12c9104b6dcca99a2cfb0db49b22a",
              "status": "affected",
              "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf",
              "versionType": "git"
            },
            {
              "lessThan": "22f9efb3ae07f966a1901d929d16df1388cce65c",
              "status": "affected",
              "version": "63c13d61eafe4606f1c16c54da40c4eee78e9edf",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/remoteproc/mtk_scp.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "lessThan": "5.6",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.109",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.50",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.4",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.270",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.221",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.188",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.157",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.109",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.50",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2.4",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.3",
                  "versionStartIncluding": "5.6",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: scp: Fix device reference leak on failed lookup\n\nMake sure to drop the reference taken to the SCP device when attempting\nto look up its driver data before the driver has been bound.\n\nNote that holding a reference to a device does not prevent its driver\ndata from going away."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-19T08:48:03.643Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/f1c9512ae072996647fb829c6402348d1b72af39"
        },
        {
          "url": "https://git.kernel.org/stable/c/d6ef9060775483bcf57291cbacbc0fe89b5857da"
        },
        {
          "url": "https://git.kernel.org/stable/c/554689ff2d7561d91011e69a8bfcef1b71901b2b"
        },
        {
          "url": "https://git.kernel.org/stable/c/6ca338cf2d386fd701b2dc27a2cd4c067a45d545"
        },
        {
          "url": "https://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b"
        },
        {
          "url": "https://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6"
        },
        {
          "url": "https://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a"
        },
        {
          "url": "https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c"
        }
      ],
      "title": "remoteproc: scp: Fix device reference leak on failed lookup",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-89512",
    "datePublished": "2026-09-11T19:43:57.286Z",
    "dateReserved": "2026-09-11T19:38:34.717Z",
    "dateUpdated": "2026-10-19T08:48:03.643Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.