CVE-2026-89572

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-89572", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-09-11T19:38:34.727Z", "datePublished": "2026-09-11T19:44:41.072Z", "dateUpdated": "2026-10-21T12:47:55.785Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-10-21T12:47:55.785Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: apple-soc: Fix OPP table cleanup\n\napple_soc_cpufreq_init() adds OPP tables from firmware, but\nsome failure paths do not remove them. The driver also uses\ndev_pm_opp_remove_all_dynamic(), which is not the right cleanup\nhelper for OPP tables loaded from firmware.\n\nUse the cpumask OPP helper after the policy CPU mask has been\npopulated. Pair it with the matching cpumask remove helper on\nfailure paths and in apple_soc_cpufreq_exit(). This also removes\nthe separate dev_pm_opp_set_sharing_cpus() call, as the cpumask\nhelper loads the DT OPP tables for all CPUs in the policy."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/cpufreq/apple-soc-cpufreq.c"], "versions": [{"version": "6286bbb40576ffadfde206c332b61345c19af57f", "lessThan": "12b54e5aab7c0850d39a51a32200f76d5e15040e", "status": "affected", "versionType": "git"}, {"version": "6286bbb40576ffadfde206c332b61345c19af57f", "lessThan": "d28ad9bb050e80770f0b644304cb75932e289238", "status": "affected", "versionType": "git"}, {"version": "6286bbb40576ffadfde206c332b61345c19af57f", "lessThan": "7c19b94c625dc7042b0a7dff4c8da158358ffa2c", "status": "affected", "versionType": "git"}, {"version": "6286bbb40576ffadfde206c332b61345c19af57f", "lessThan": "36c55d118d5ecd2fb444f52802955903937b9ccd", "status": "affected", "versionType": "git"}, {"version": "6286bbb40576ffadfde206c332b61345c19af57f", "lessThan": "d87cb889dc7ab1f2deecadf2a5e9023184bd7900", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["drivers/cpufreq/apple-soc-cpufreq.c"], "versions": [{"version": "6.2", "status": "affected"}, {"version": "0", "lessThan": "6.2", "status": "unaffected", "versionType": "semver"}, {"version": "6.6.160", "lessThanOrEqual": "6.6.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.12.111", "lessThanOrEqual": "6.12.*", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.51", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2.4", "lessThanOrEqual": "7.2.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.3", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "6.6.160"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "6.12.111"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "6.18.51"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "7.2.4"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.2", "versionEndExcluding": "7.3"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/12b54e5aab7c0850d39a51a32200f76d5e15040e"}, {"url": "https://git.kernel.org/stable/c/d28ad9bb050e80770f0b644304cb75932e289238"}, {"url": "https://git.kernel.org/stable/c/7c19b94c625dc7042b0a7dff4c8da158358ffa2c"}, {"url": "https://git.kernel.org/stable/c/36c55d118d5ecd2fb444f52802955903937b9ccd"}, {"url": "https://git.kernel.org/stable/c/d87cb889dc7ab1f2deecadf2a5e9023184bd7900"}], "title": "cpufreq: apple-soc: Fix OPP table cleanup", "x_generator": {"engine": "bippy-1.2.0"}}}}

{}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["drivers/cpufreq/apple-soc-cpufreq.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "12b54e5aab7c0850d39a51a32200f76d5e15040e", "status": "affected", "version": "6286bbb40576ffadfde206c332b61345c19af57f", "versionType": "git"}, {"lessThan": "d28ad9bb050e80770f0b644304cb75932e289238", "status": "affected", "version": "6286bbb40576ffadfde206c332b61345c19af57f", "versionType": "git"}, {"lessThan": "7c19b94c625dc7042b0a7dff4c8da158358ffa2c", "status": "affected", "version": "6286bbb40576ffadfde206c332b61345c19af57f", "versionType": "git"}, {"lessThan": "36c55d118d5ecd2fb444f52802955903937b9ccd", "status": "affected", "version": "6286bbb40576ffadfde206c332b61345c19af57f", "versionType": "git"}, {"lessThan": "d87cb889dc7ab1f2deecadf2a5e9023184bd7900", "status": "affected", "version": "6286bbb40576ffadfde206c332b61345c19af57f", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["drivers/cpufreq/apple-soc-cpufreq.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.2"}, {"lessThan": "6.2", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.6.*", "status": "unaffected", "version": "6.6.160", "versionType": "semver"}, {"lessThanOrEqual": "6.12.*", "status": "unaffected", "version": "6.12.111", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.51", "versionType": "semver"}, {"lessThanOrEqual": "7.2.*", "status": "unaffected", "version": "7.2.4", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.3", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: apple-soc: Fix OPP table cleanup\n\napple_soc_cpufreq_init() adds OPP tables from firmware, but\nsome failure paths do not remove them. The driver also uses\ndev_pm_opp_remove_all_dynamic(), which is not the right cleanup\nhelper for OPP tables loaded from firmware.\n\nUse the cpumask OPP helper after the policy CPU mask has been\npopulated. Pair it with the matching cpumask remove helper on\nfailure paths and in apple_soc_cpufreq_exit(). This also removes\nthe separate dev_pm_opp_set_sharing_cpus() call, as the cpumask\nhelper loads the DT OPP tables for all CPUs in the policy."}], "id": "CVE-2026-89572", "lastModified": "2026-10-21T13:20:09.137", "metrics": {}, "published": "2026-09-11T20:19:41.270", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/12b54e5aab7c0850d39a51a32200f76d5e15040e"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/36c55d118d5ecd2fb444f52802955903937b9ccd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/7c19b94c625dc7042b0a7dff4c8da158358ffa2c"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d28ad9bb050e80770f0b644304cb75932e289238"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/d87cb889dc7ab1f2deecadf2a5e9023184bd7900"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}

{"bugzilla": {"description": "kernel: Linux kernel: cpufreq apple-soc driver improper cleanup of OPP tables", "id": "2532306", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532306"}, "csaw": false, "cvss3": {"cvss3_base_score": "2.3", "cvss3_scoring_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L", "status": "draft"}, "cwe": "CWE-772", "details": ["A flaw was found in the `cpufreq` apple-soc driver of the Linux kernel. The `apple_soc_cpufreq_init()` function, responsible for adding Operating Performance Point (OPP) tables from firmware, does not properly remove these tables in certain failure scenarios. This improper cleanup can lead to resource management issues within the kernel."], "name": "CVE-2026-89572", "public_date": "2026-09-11T19:44:41Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-89572\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-89572\nhttps://git.kernel.org/stable/c/36c55d118d5ecd2fb444f52802955903937b9ccd\nhttps://git.kernel.org/stable/c/7c19b94c625dc7042b0a7dff4c8da158358ffa2c\nhttps://git.kernel.org/stable/c/d87cb889dc7ab1f2deecadf2a5e9023184bd7900"], "threat_severity": "Low"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6286bbb40576ffadfde206c332b61345c19af57f,7c19b94c625dc7042b0a7dff4c8da158358ffa2c)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6286bbb40576ffadfde206c332b61345c19af57f,36c55d118d5ecd2fb444f52802955903937b9ccd)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "[6286bbb40576ffadfde206c332b61345c19af57f,d87cb889dc7ab1f2deecadf2a5e9023184bd7900)"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "6.2"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[0,6.2)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[6.18.51,6.19.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[7.2.4,7.3.0)"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "generic", "value": "[7.3-rc1,*]"}}], "enrichment": {"confidence": 99.0, "confidence_source": "inferred", "scores": [{"score": 99.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "original": {"product": "Linux", "source": "cna", "vendor": "Linux"}, "product": "linux_kernel", "vendor": "linux"}], "created": "2026-09-12T09:30:13.018496+00:00", "updated": "2026-09-15T22:00:17.597830+00:00", "vendors": ["linux", "linux$PRODUCT$linux_kernel"]}