CVE-2026-89877

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the saa7164 dev setup() function where a device is added to the global saa7164 devlist before PCI BAR memory regions are requested. If the get resources() function fails, the device count is decremented and an error is returned, but the device remains on the saa7164 devlist. Consequently, the probe error path frees the device, resulting in a dangling entry on the global list. Additionally, BAR0 may not be released if the BAR2 request fails after BAR0 was successfully requested.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.