CVE-2026-89937

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the chemical sensor driver for sgp30 where the sgp probe() function fails to properly handle errors during the creation of the IAQ thread. Specifically, the kthread run() function can fail and return an error pointer; however, sgp probe() stores this pointer and incorrectly returns success. This results in the device being registered without its required IAQ thread, which subsequently causes sgp remove() to pass an invalid error pointer to the kthread stop() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.