CVE-2026-89437Medium· 5.5▾ SunlitA flaw was found in the Linux kernel. The `sar_probe()` function, specifically in its error handling paths, fails to free memory allocated for `device_mode_info` by the `parse_package()` function, which is called by `sar_get_data()`. This …
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 4.4
none → medium
— → 4.4
none → medium
Last analysed / modified upstream
0.2% → 0.2%
— → 5.5
none → medium
A flaw was found in the Linux kernel. The sar_probe() function, specifically in its error handling paths, fails to free memory allocated for device_mode_info by the parse_package() function, which is called by sar_get_data(). This oversight leads to a memory leak. Repeated occurrences of this flaw could exhaust system memory, potentially resulting in a Denial of Service (DoS) for the affected system.
kernel: platform/x86: int1092: Fix potential memory leak in sar_probe() — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-14.
Not affected:
Refer to the advisory for fix availability.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89667High· 8.1In the Linux kernel, the following vulnerability has been resolved: nfsd: close shrinker/GC/fsnotify vs per-net shutdown race in filecache The shrinker, GC worker, and fsnotify/lease callbacks can unhash an nfsd_file from the rhashtabl…
CVE-2026-89572Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() adds OPP tables from firmware, but some failure paths do not remove them
CVE-2026-89644Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: btrfs: fix extent map leak in NOCOW direct I/O write btrfs_dio_iomap_begin() calls btrfs_get_extent(), which returns an extent map reference that must be dropped on al…
CVE-2026-80945Critical· 9.1In the Linux kernel, the following vulnerability has been resolved: crypto: iaa - unmap dst before software fallback on decompress On a hardware analytics error, decompress retries through the software fallback, which writes req->dst w…
CVE-2026-89492Critical· 9.8In the Linux kernel, the following vulnerability has been resolved: ocfs2: validate directory-index entry counts when reading metadata ocfs2_validate_dx_leaf() and ocfs2_validate_dx_root() check the ECC and signature of an indexed-dire…
CVE-2026-89535High· 8.1In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reorder rpcrdma_rn_unregister before rdma_destroy_id svc_rdma_free() caches rdma->sc_cm_id->device before teardown, then calls rdma_destroy_id(sc_cm_id) which…