« Volver al listado

CVE-2026-89933

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

iio: pressure: dps310: fix NULL pointer dereference on ACPI probe

When the device is enumerated through its ACPI HID (IFX3100), i2c_client_get_device_id() returns NULL: the ACPI-derived client name does not match the driver's i2c_device_id table. dps310_probe() then dereferences that NULL pointer in "iio->name = id->name" and crashes the kernel during probe.

The IIO device name is always "dps310", so set it directly and drop the now-unused device-id lookup.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-89933",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "72ff282819d0526d3e4417c2a61414557981b5af",
              "lessThan": "a32a39da18e01b20c2ab65af9be34dc870187382",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "72ff282819d0526d3e4417c2a61414557981b5af",
              "lessThan": "bc7b09e701b4175fc683b579fcdef3bfac809239",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "72ff282819d0526d3e4417c2a61414557981b5af",
              "lessThan": "7ded5b76ec2df6a3fb1bfde0d1869cde363fef30",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "72ff282819d0526d3e4417c2a61414557981b5af",
              "lessThan": "3fa189573cca284ae663bfd2d5b9ed755bec5e9d",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "72ff282819d0526d3e4417c2a61414557981b5af",
              "lessThan": "26e9213898fc949923188ef0aeea31fc87708836",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "drivers/iio/pressure/dps310.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.18"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.18",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.*"
            },
            {
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver",
              "lessThanOrEqual": "6.12.*"
            },
            {
              "status": "unaffected",
              "version": "6.18.51",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.5",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "drivers/iio/pressure/dps310.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-16T11:17:02.680",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/26e9213898fc949923188ef0aeea31fc87708836",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/3fa189573cca284ae663bfd2d5b9ed755bec5e9d",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/7ded5b76ec2df6a3fb1bfde0d1869cde363fef30",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/a32a39da18e01b20c2ab65af9be34dc870187382",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/bc7b09e701b4175fc683b579fcdef3bfac809239",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: pressure: dps310: fix NULL pointer dereference on ACPI probe\n\nWhen the device is enumerated through its ACPI HID (IFX3100),\ni2c_client_get_device_id() returns NULL: the ACPI-derived client name\ndoes not match the driver's i2c_device_id table. dps310_probe() then\ndereferences that NULL pointer in \"iio->name = id->name\" and crashes the\nkernel during probe.\n\nThe IIO device name is always \"dps310\", so set it directly and drop the\nnow-unused device-id lookup."
    }
  ],
  "lastModified": "2026-09-16T11:17:02.680",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}