---
id: CVE-2026-89933
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

  When the device is enumerated through its ACPI HID (IFX3100),
  i2c_client_get_device_id() returns NULL…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

  When the device is enumerated through its ACPI HID (IFX3100),
  i2c_client_get_device_id() returns NULL…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 72ff282819d0526d3e4417c2a61414557981b5af <
    a32a39da18e01b20c2ab65af9be34dc870187382
  - >-
    Linux >= 72ff282819d0526d3e4417c2a61414557981b5af <
    bc7b09e701b4175fc683b579fcdef3bfac809239
  - >-
    Linux >= 72ff282819d0526d3e4417c2a61414557981b5af <
    7ded5b76ec2df6a3fb1bfde0d1869cde363fef30
  - >-
    Linux >= 72ff282819d0526d3e4417c2a61414557981b5af <
    3fa189573cca284ae663bfd2d5b9ed755bec5e9d
  - >-
    Linux >= 72ff282819d0526d3e4417c2a61414557981b5af <
    26e9213898fc949923188ef0aeea31fc87708836
  - Linux 5.18
published: '2026-09-16'
updated: '2026-09-16'
sourceUpdated: '2026-09-16T11:17:02.680'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-89933'
references:
  - url: 'https://git.kernel.org/stable/c/26e9213898fc949923188ef0aeea31fc87708836'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3fa189573cca284ae663bfd2d5b9ed755bec5e9d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7ded5b76ec2df6a3fb1bfde0d1869cde363fef30'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/a32a39da18e01b20c2ab65af9be34dc870187382'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/bc7b09e701b4175fc683b579fcdef3bfac809239'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-16T10:53:53.968Z'
epss: 0.002
epssPercentile: 0.10104
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

When the device is enumerated through its ACPI HID (IFX3100),
i2c_client_get_device_id() returns NULL: the ACPI-derived client name
does not match the driver's i2c_device_id table. dps310_probe() then
dereferences that NULL pointer in "iio->name = id->name" and crashes the
kernel during probe.

The IIO device name is always "dps310", so set it directly and drop the
now-unused device-id lookup.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.