CVE-2026-89888

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-89888

Key Details

CVE	CVE-2026-89888
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

media: i2c: ov02a10: fix endpoint parsing use-after-free

The ov02a10_check_hwcfg() function calls fwnode_handle_put(ep)

immediately after allocating and parsing the endpoint. However, it

subsequently calls fwnode_property_read_u32() using the same 'ep'

handle, leading to a potential use-after-free.

Additionally, reading the optional 'ovti,mipi-clock-voltage' property

used to overwrite the 'ret' variable. If the property was missing,

'ret' would become negative, and this failure code would be incorrectly

returned at the end of the function, causing probe to fail entirely.

Fix the use-after-free by moving fwnode_property_read_u32() before

the endpoint is parsed and freed. Avoid the error leak by not

assigning the result of fwnode_property_read_u32() to 'ret'. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-89888
CVE	https://www.cve.org/CVERecord?id=CVE-2026-89888

Source

Reference

NVD

CVE