CVE-2026-89512: remoteproc: scp: Fix device reference leak on failed lookup
Published Sep 11, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
remoteproc: scp: Fix device reference leak on failed lookup
Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound.
Note that holding a reference to a device does not prevent its driver data from going away.
Affected Software
1 affected component
Linux Linux kernel
Event History
Sep 11, 2026
CVE Published
via MITRE·07:43 PM
Data Sourced
via MITRE·07:43 PM
Description
Frequently Asked Questions
1
When can this issue occur?
It can occur when the remoteproc SCP code looks up SCP driver data before the SCP driver has been bound. In that failed lookup path, a reference to the SCP device was not dropped.
2
Does holding a device reference protect the SCP driver's data?
No. The provided information explicitly notes that holding a reference to a device does not prevent its driver data from going away.