CVE-2026-89893

Last refreshed2026-10-19

Status: UPDATED | Advisory ID: CVE-2026-89893

Key Details

CVE	CVE-2026-89893
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-19
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

media: cx23885: cancel NetUP CI work before teardown

netup_ci_exit() frees a netup_ci_state while its work item,

netup_read_ci_status(), may still be pending or running on the system

workqueue. The worker obtains the state with container_of() and

dereferences it, so it must not outlive the state.

netup_ci_init() queues the initial status read, and CI GPIO interrupts

subsequently queue the same work from netup_ci_slot_status(). During

remove, cx23885_finidev() calls free_irq() before the CI device is

unregistered. free_irq() prevents further IRQ handlers from running,

but does not drain work queued previously, so the worker can run after

netup_ci_exit() frees the state.

Call cancel_work_sync() before dvb_ca_en50221_release() and kfree().

This issue was found by an in-house static analysis tool. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-89893
CVE	https://www.cve.org/CVERecord?id=CVE-2026-89893

Source

Reference

NVD

CVE