CVE-2026-89992: cpuidle: dt_idle_genpd: kfree() the original name allocation
Published Sep 16, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
cpuidle: dtidlegenpd: kfree() the original name allocation
dtidlepdalloc() kasprintf()s the full node path, then points pd->name at kbasename() of that string. dtidlepdfree() kfree()s pd->name, which is no longer the start of the allocation.
Copy the basename instead.
Affected Software
1 affected component
Linux Linux kernel
Event History
Sep 16, 2026
CVE Published
via MITRE·10:33 AM
Data Sourced
via MITRE·10:33 AM
Description
Frequently Asked Questions
1
Which kernel versions are affected or fixed?
The provided data does not identify affected or fixed Linux kernel version numbers. It includes three stable kernel commit references for the resolved issue.
2
Is default-configuration exposure or a practical workaround documented?
No default-configuration status, exploitation prerequisites, or workaround is provided. The available remediation information is that the issue has been resolved in the referenced kernel commits.