CVE-2026-89992

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the cpuidle component within the dt idle genpd functionality. The dt idle pd alloc() function uses kasprintf() to allocate the full node path and then sets pd->name to the result of kbasename() of that string. Subsequently, dt idle pd free() attempts to call kfree() on pd->name, which no longer points to the start of the original memory allocation, leading to an invalid memory free.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.