CVE-2026-89512

remoteproc: scp: Fix device reference leak on failed lookup

N/A
Published: September 11, 2026 at 07:43 PM UTC
Updated: October 19, 2026 at 09:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a device does not prevent its driver data from going away.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

5.663c13d61eafe4606f1c16c54da40c4eee78e9edf
Vendor states this is fixed in 22f9efb3ae07f966a1901d929d16df1388cce65c (fixed)
Vendor states this is fixed in 440bcb0948a12c9104b6dcca99a2cfb0db49b22a (fixed)
Vendor states this is fixed in 554689ff2d7561d91011e69a8bfcef1b71901b2b (fixed)
Vendor states this is fixed in 6ca338cf2d386fd701b2dc27a2cd4c067a45d545 (fixed)
Vendor states this is fixed in c7e32814a6bf20f792d05f0bc9f94f0606311bc6 (fixed)
Vendor states this is fixed in d6ef9060775483bcf57291cbacbc0fe89b5857da (fixed)
Vendor states this is fixed in f1c9512ae072996647fb829c6402348d1b72af39 (fixed)
Vendor states this is fixed in f794c930d8238e370fd61fcb12cc301ae098231b (fixed)
Vendor states this is fixed in 5.10.270 (unaffected)
Vendor states this is fixed in 5.15.221 (unaffected)
Vendor states this is fixed in 5.6 (unaffected)
Vendor states this is fixed in 6.1.188 (unaffected)
Vendor states this is fixed in 6.12.109 (unaffected)
Vendor states this is fixed in 6.18.50 (unaffected)
Vendor states this is fixed in 6.6.157 (unaffected)
Vendor states this is fixed in 7.2.4 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc1 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Free plan, no card