CVE-2026-89982

i2c: mux: Fix channel node leak on adapter add failure

Published Sep 16, 2026 CVSS n/a EPSS < 1% KEV · Not listed

Description

In the Linux kernel, the following vulnerability has been resolved:

i2c: mux: Fix channel node leak on adapter add failure

i2c_mux_add_adapter() takes a reference to the Device Tree channel node
before registering the new adapter. If adapter registration fails, the
error path frees the private data without dropping that reference.

Release the channel node before freeing the private data.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`bc45449b1444611d68466ae7f45f235420d79019`	affected	< 4f42f70afd2447f3c82ca69d1e03466a75348ba9
`bc45449b1444611d68466ae7f45f235420d79019`	affected	< 4c9bc46a2a4afb7a11c48d33bdf19febab431015
`bc45449b1444611d68466ae7f45f235420d79019`	affected	< dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1
`bc45449b1444611d68466ae7f45f235420d79019`	affected	< 0927153f2abf48b6cc3e5f27063a17f7a8d47f38
`bc45449b1444611d68466ae7f45f235420d79019`	affected	< b580f062b24c4eef562f08f210c028adb34ef14e
`bc45449b1444611d68466ae7f45f235420d79019`	affected	< 2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5
`bc45449b1444611d68466ae7f45f235420d79019`	affected	< 694e7e6edf249723ca7d3ef77c2ca1badfc78dc4
`bc45449b1444611d68466ae7f45f235420d79019`	affected	< 385c7af4e3b95d0769fd211831674e83b16a2ebf

Linux

affected

Version	Status	Constraints
`3.5`	affected	—
`0`	unaffected	< 3.5
`5.10.270`	unaffected	≤ 5.10.*
`5.15.221`	unaffected	≤ 5.15.*
`6.1.188`	unaffected	≤ 6.1.*
`6.6.157`	unaffected	≤ 6.6.*
`6.12.110`	unaffected	≤ 6.12.*
`6.18.51`	unaffected	≤ 6.18.*
`7.2.5`	unaffected	≤ 7.2.*
`7.3`	unaffected	≤ *

No data.

Vendor Product Versions

Linux

Linux Kernel

Version	Status	Scheme	Platform
`[bc45449b1444611d68466ae7f45f235420d79019,4f42f70afd2447f3c82ca69d1e03466a75348ba9)`	affected	code_commit	—
`[bc45449b1444611d68466ae7f45f235420d79019,4c9bc46a2a4afb7a11c48d33bdf19febab431015)`	affected	code_commit	—
`[bc45449b1444611d68466ae7f45f235420d79019,dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1)`	affected	code_commit	—
`[bc45449b1444611d68466ae7f45f235420d79019,0927153f2abf48b6cc3e5f27063a17f7a8d47f38)`	affected	code_commit	—
`[bc45449b1444611d68466ae7f45f235420d79019,b580f062b24c4eef562f08f210c028adb34ef14e)`	affected	code_commit	—
`[bc45449b1444611d68466ae7f45f235420d79019,2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5)`	affected	code_commit	—
`[bc45449b1444611d68466ae7f45f235420d79019,694e7e6edf249723ca7d3ef77c2ca1badfc78dc4)`	affected	code_commit	—
`[bc45449b1444611d68466ae7f45f235420d79019,385c7af4e3b95d0769fd211831674e83b16a2ebf)`	affected	code_commit	—

Linux

Linux Kernel

Version	Status	Scheme	Platform
`3.5`	affected	semver	—
`[0,3.5)`	unaffected	generic	—
`[5.10.270,5.11.0)`	unaffected	semver	—
`[5.15.221,5.16.0)`	unaffected	semver	—
`[6.1.188,6.2.0)`	unaffected	semver	—
`[6.6.157,6.7.0)`	unaffected	semver	—
`[6.12.110,6.13.0)`	unaffected	semver	—
`[6.18.51,6.19.0)`	unaffected	semver	—
`[7.2.5,7.3.0)`	unaffected	semver	—
`[7.3-rc1,*]`	unaffected	semver	—

Remediation

No solution or workaround provided in the CVE record

Tracking

Advisories

Source	ID	Title
Debian DLA	DLA-4817-1	linux-6.12 security update
Debian DLA	DLA-4841-1	linux security update
Debian DSA	DSA-6528-1	linux security update
Ubuntu USN	USN-8961-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9019-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9020-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9022-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9023-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9024-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9025-1	Linux kernel vulnerabilities
Ubuntu USN	USN-9026-1	Linux kernel (Azure) vulnerabilities
Ubuntu USN	USN-9029-1	Linux kernel (Raspberry Pi) vulnerabilities
Ubuntu USN	USN-9039-1	Linux kernel (Azure CVM) vulnerabilities
Ubuntu USN	USN-9040-1	Linux kernel (Low Latency NVIDIA) vulnerabilities
Ubuntu USN	USN-9066-1	Linux kernel (HWE) vulnerabilities
Ubuntu USN	USN-9091-1	Linux kernel (NVIDIA Tegra) vulnerabilities

Metrics

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.216% probability within 30 days)

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/0927153f2abf48b6cc3e5f27063a17f7a8d47f38
https://git.kernel.org/stable/c/2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5
https://git.kernel.org/stable/c/385c7af4e3b95d0769fd211831674e83b16a2ebf
https://git.kernel.org/stable/c/4c9bc46a2a4afb7a11c48d33bdf19febab431015
https://git.kernel.org/stable/c/4f42f70afd2447f3c82ca69d1e03466a75348ba9
https://git.kernel.org/stable/c/694e7e6edf249723ca7d3ef77c2ca1badfc78dc4
https://git.kernel.org/stable/c/b580f062b24c4eef562f08f210c028adb34ef14e
https://git.kernel.org/stable/c/dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1

History

Sep 18, 2026 8:30 AM Weaknesses updated View changes

Type	Values Removed	Values Added
Weaknesses		CWE-401

Sep 16, 2026 10:45 AM Description updated. Title updated. First appearance in the feed. Affected versions updated. Affected vendors updated. Added references View changes

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2c_mux_add_adapter() takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data without dropping that reference. Release the channel node before freeing the private data.
Title		i2c: mux: Fix channel node leak on adapter add failure
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/0927153f2abf48b6cc3e5f27063a17f7a8d47f38 https://git.kernel.org/stable/c/2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5 https://git.kernel.org/stable/c/385c7af4e3b95d0769fd211831674e83b16a2ebf https://git.kernel.org/stable/c/4c9bc46a2a4afb7a11c48d33bdf19febab431015 https://git.kernel.org/stable/c/4f42f70afd2447f3c82ca69d1e03466a75348ba9 https://git.kernel.org/stable/c/694e7e6edf249723ca7d3ef77c2ca1badfc78dc4 https://git.kernel.org/stable/c/b580f062b24c4eef562f08f210c028adb34ef14e https://git.kernel.org/stable/c/dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1