{"api_version":"1","generated_at":"2026-09-14T04:18:08+00:00","cve":"CVE-2026-89512","urls":{"html":"https://cve.report/CVE-2026-89512","api":"https://cve.report/api/cve/CVE-2026-89512.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-89512","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-89512"},"summary":{"title":"remoteproc: scp: Fix device reference leak on failed lookup","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: scp: Fix device reference leak on failed lookup\n\nMake sure to drop the reference taken to the SCP device when attempting\nto look up its driver data before the driver has been bound.\n\nNote that holding a reference to a device does not prevent its driver\ndata from going away.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-09-11 20:19:33","updated_at":"2026-09-11 20:19:33"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a","name":"https://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b","name":"https://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6","name":"https://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c","name":"https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89512","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89512","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf f794c930d8238e370fd61fcb12cc301ae098231b git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf c7e32814a6bf20f792d05f0bc9f94f0606311bc6 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf 440bcb0948a12c9104b6dcca99a2cfb0db49b22a git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 63c13d61eafe4606f1c16c54da40c4eee78e9edf 22f9efb3ae07f966a1901d929d16df1388cce65c git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.6","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.6 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.109 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.50 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.2.4 7.2.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.3-rc1 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2026","cve_id":"89512","cve":"CVE-2026-89512","epss":"0.002000000","percentile":"0.099430000","score_date":"2026-09-13","updated_at":"2026-09-14 00:18:02"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/remoteproc/mtk_scp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"f794c930d8238e370fd61fcb12cc301ae098231b","status":"affected","version":"63c13d61eafe4606f1c16c54da40c4eee78e9edf","versionType":"git"},{"lessThan":"c7e32814a6bf20f792d05f0bc9f94f0606311bc6","status":"affected","version":"63c13d61eafe4606f1c16c54da40c4eee78e9edf","versionType":"git"},{"lessThan":"440bcb0948a12c9104b6dcca99a2cfb0db49b22a","status":"affected","version":"63c13d61eafe4606f1c16c54da40c4eee78e9edf","versionType":"git"},{"lessThan":"22f9efb3ae07f966a1901d929d16df1388cce65c","status":"affected","version":"63c13d61eafe4606f1c16c54da40c4eee78e9edf","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/remoteproc/mtk_scp.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.6"},{"lessThan":"5.6","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.109","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.50","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.3-rc1","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.109","versionStartIncluding":"5.6","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.50","versionStartIncluding":"5.6","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.4","versionStartIncluding":"5.6","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3-rc1","versionStartIncluding":"5.6","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: scp: Fix device reference leak on failed lookup\n\nMake sure to drop the reference taken to the SCP device when attempting\nto look up its driver data before the driver has been bound.\n\nNote that holding a reference to a device does not prevent its driver\ndata from going away."}],"providerMetadata":{"dateUpdated":"2026-09-11T19:43:57.286Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b"},{"url":"https://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6"},{"url":"https://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a"},{"url":"https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c"}],"title":"remoteproc: scp: Fix device reference leak on failed lookup","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-89512","datePublished":"2026-09-11T19:43:57.286Z","dateReserved":"2026-09-11T19:38:34.717Z","dateUpdated":"2026-09-11T19:43:57.286Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-11 20:19:33","lastModifiedDate":"2026-09-11 20:19:33","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"89512","Ordinal":"1","Title":"remoteproc: scp: Fix device reference leak on failed lookup","CVE":"CVE-2026-89512","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"89512","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\nremoteproc: scp: Fix device reference leak on failed lookup\n\nMake sure to drop the reference taken to the SCP device when attempting\nto look up its driver data before the driver has been bound.\n\nNote that holding a reference to a device does not prevent its driver\ndata from going away.","Type":"Description","Title":"remoteproc: scp: Fix device reference leak on failed lookup"}]}}}