{"id":"CVE-2026-89883","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rc: sunxi-cir: Unregister rc device on probe failure\n\nAfter rc_register_device() succeeds, later probe failures must undo the\nregistration with rc_unregister_dev…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rc: sunxi-cir: Unregister rc device on probe failure\n\nAfter rc_register_device() succeeds, later probe failures must undo the\nregistration with rc_unregister_dev…","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f < 4655a591478e4b31a3396695a2457daad9d4c899","Linux >= b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f < 4efd7146dcf959afe64e9c51531cd8f82e60eab6","Linux >= b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f < 826763adbd8bd3137c5b3756650da473dc6216d5","Linux >= b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f < 59951b8a87ef4fb4b5b9409f70ba07663681a040","Linux >= b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f < 5b58d8c206f37525c8217171e1f3e91dd2fa55e5","Linux >= b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f < 5e6f5bffaa80fc8ecce348ec0e34fed9d843e47e","Linux >= b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f < 479aa6fa8c50f1052f1451326ef7d4d586d340c3","Linux 3.17"],"published":"2026-09-16","updated":"2026-09-16","sourceUpdated":"2026-09-16T15:18:14.963","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-89883","references":[{"url":"https://git.kernel.org/stable/c/4655a591478e4b31a3396695a2457daad9d4c899","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/479aa6fa8c50f1052f1451326ef7d4d586d340c3","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4efd7146dcf959afe64e9c51531cd8f82e60eab6","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/59951b8a87ef4fb4b5b9409f70ba07663681a040","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5b58d8c206f37525c8217171e1f3e91dd2fa55e5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/5e6f5bffaa80fc8ecce348ec0e34fed9d843e47e","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/826763adbd8bd3137c5b3756650da473dc6216d5","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-16T10:53:53.983Z","epss":0.00164,"epssPercentile":0.0605,"slug":"CVE-2026-89883","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nmedia: rc: sunxi-cir: Unregister rc device on probe failure\n\nAfter rc_register_device() succeeds, later probe failures must undo the\nregistration with rc_unregister_device(). The current error path jumps to\nthe allocation cleanup label and only calls rc_free_device(), leaving the\nrc device registration and resources created by rc_register_device()\nbehind.\n\nAdd a registered-device unwind label for the IRQ lookup, IRQ request, and\nhardware initialization failure paths. Keep rc_free_device() for failures\nbefore rc_register_device() succeeds.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":205168,"id":"CVE-2026-89883","ts":1789570705559,"field":"cvss","old":null,"new":"7.8"},{"seq":205167,"id":"CVE-2026-89883","ts":1789570705559,"field":"severity","old":"none","new":"high"}]}