CVE-2026-89992 in Linux
Résumé
par MITRE • 17/09/2026
In the Linux kernel, the following vulnerability has been resolved:
cpuidle: dt_idle_genpd: kfree() the original name allocation
dt_idle_pd_alloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dt_idle_pd_free() kfree()s pd->name, which is no longer the start of the allocation.
Copy the basename instead.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.