8.8

CVE-2026-89626

HID: sensor: custom: Fix field sysfs group cleanup on failure

In the Linux kernel, the following vulnerability has been resolved:

HID: sensor: custom: Fix field sysfs group cleanup on failure

hid_sensor_custom_add_attributes() creates one sysfs group for each
custom sensor field. If sysfs_create_group() fails after some groups
have already been created, the function returns the error without
removing the previously created groups.

Add a local unwind path to remove the groups that were already created.
With enable_sensor exposed only after the field attributes are ready,
this path can free sensor_inst->fields without leaving enable_sensor
able to access pointers into that array.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d
Version < 416194933af63bd58d03b7605b1ebc1711186838
Status affected
Version 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d
Version < d0e15091e88d18e30b67daf85b88f6528bb9bf41
Status affected
Version 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d
Version < 10b05fafff932e325896d59dde40938954ab4577
Status affected
Version 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d
Version < 2409779f3096fcef41bcf57b5f4887d0fa0dc8dd
Status affected
Version 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d
Version < 79154fad98ee843e5363940841e2d831503c190a
Status affected
Version 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d
Version < f3f37b937a6ea2a00fb5e6189e74f855caa43eb5
Status affected
Version 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d
Version < d96f8958d4469ac02d9c563686cdd968005b944d
Status affected
Version 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d
Version < 3789d0802ddb4b3be04062caf4bfadd23496e9a7
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.1
Status affected
Version 0
Version < 4.1
Status unaffected
Version <= 5.10.*
Version 5.10.270
Status unaffected
Version <= 5.15.*
Version 5.15.221
Status unaffected
Version <= 6.1.*
Version 6.1.188
Status unaffected
Version <= 6.6.*
Version 6.6.157
Status unaffected
Version <= 6.12.*
Version 6.12.109
Status unaffected
Version <= 6.18.*
Version 6.18.50
Status unaffected
Version <= 7.2.*
Version 7.2.4
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.32% 0.25
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 8.8 2.8 5.9
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/79154fad98ee843e5363940841e2d831503c190a
https://git.kernel.org/stable/c/f3f37b937a6ea2a00fb5e6189e74f855caa43eb5
https://git.kernel.org/stable/c/d96f8958d4469ac02d9c563686cdd968005b944d
https://git.kernel.org/stable/c/3789d0802ddb4b3be04062caf4bfadd23496e9a7
https://git.kernel.org/stable/c/10b05fafff932e325896d59dde40938954ab4577
https://git.kernel.org/stable/c/2409779f3096fcef41bcf57b5f4887d0fa0dc8dd
https://git.kernel.org/stable/c/416194933af63bd58d03b7605b1ebc1711186838
https://git.kernel.org/stable/c/d0e15091e88d18e30b67daf85b88f6528bb9bf41