CVE-2026-89769Medium· 5.5▾ SunlitA flaw was found in the Linux kernel's NXP PIT (Programmable Interrupt Timer) clocksource driver. When the CPU hotplug setup fails after an interrupt request (IRQ) has been successfully registered, the error handling does not properly free…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 30.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Sep 12.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.2%
— → 7.5
none → high
— → 7.5
none → high
— → 7.4
none → high
7.4 → 7.5
7.5 → 7.4
7.4 → 7.5
Last analysed / modified upstream
7.5 → 5.5
high → medium
A flaw was found in the Linux kernel's NXP PIT (Programmable Interrupt Timer) clocksource driver. When the CPU hotplug setup fails after an interrupt request (IRQ) has been successfully registered, the error handling does not properly free the IRQ. This oversight results in a leaked IRQ line and a dangling pointer, which could lead to a use-after-free vulnerability if the IRQ is subsequently triggered. A local attacker could potentially exploit this to cause system instability or execute arbitrary code.
kernel: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path — rated Moderate by Red Hat. Released 2026-09-11, updated 2026-09-21.
Affected:
No fix planned:
Not affected:
Fix deferred
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-89668High· 7.0kernel: nfsd: move nfsd_debugfs_init() after nfsd4_init_slabs() in init_nfsd() (CVE-2026-89668)
CVE-2026-89670High· 7.0kernel: nfsd: hold rcu across localio cmpxchg retry (CVE-2026-89670)
CVE-2026-89689High· 7.0kernel: nfsd: don't free session slots that are still in use (CVE-2026-89689)
CVE-2026-89747High· 7.0kernel: tracing: Fix use-after-free in trace_pipe read on sub-buffer order change (CVE-2026-89747)
CVE-2026-89469Medium· 5.5kernel: power: supply: lp8727: fix use-after-free in lp8727_release_irq() (CVE-2026-89469)
CVE-2026-89661Medium· 5.5kernel: NFSD: Prevent post-shutdown use-after-free in unlock_filesystem (CVE-2026-89661)