{"api_version":"1","generated_at":"2026-09-11T22:05:31+00:00","cve":"CVE-2026-89572","urls":{"html":"https://cve.report/CVE-2026-89572","api":"https://cve.report/api/cve/CVE-2026-89572.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-89572","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-89572"},"summary":{"title":"cpufreq: apple-soc: Fix OPP table cleanup","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: apple-soc: Fix OPP table cleanup\n\napple_soc_cpufreq_init() adds OPP tables from firmware, but\nsome failure paths do not remove them. The driver also uses\ndev_pm_opp_remove_all_dynamic(), which is not the right cleanup\nhelper for OPP tables loaded from firmware.\n\nUse the cpumask OPP helper after the policy CPU mask has been\npopulated. Pair it with the matching cpumask remove helper on\nfailure paths and in apple_soc_cpufreq_exit(). This also removes\nthe separate dev_pm_opp_set_sharing_cpus() call, as the cpumask\nhelper loads the DT OPP tables for all CPUs in the policy.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-09-11 20:19:41","updated_at":"2026-09-11 20:19:41"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/d87cb889dc7ab1f2deecadf2a5e9023184bd7900","name":"https://git.kernel.org/stable/c/d87cb889dc7ab1f2deecadf2a5e9023184bd7900","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/7c19b94c625dc7042b0a7dff4c8da158358ffa2c","name":"https://git.kernel.org/stable/c/7c19b94c625dc7042b0a7dff4c8da158358ffa2c","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/36c55d118d5ecd2fb444f52802955903937b9ccd","name":"https://git.kernel.org/stable/c/36c55d118d5ecd2fb444f52802955903937b9ccd","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89572","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89572","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6286bbb40576ffadfde206c332b61345c19af57f 7c19b94c625dc7042b0a7dff4c8da158358ffa2c git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6286bbb40576ffadfde206c332b61345c19af57f 36c55d118d5ecd2fb444f52802955903937b9ccd git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6286bbb40576ffadfde206c332b61345c19af57f d87cb889dc7ab1f2deecadf2a5e9023184bd7900 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 6.2","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.2 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.51 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.2.4 7.2.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.3-rc1 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/cpufreq/apple-soc-cpufreq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"7c19b94c625dc7042b0a7dff4c8da158358ffa2c","status":"affected","version":"6286bbb40576ffadfde206c332b61345c19af57f","versionType":"git"},{"lessThan":"36c55d118d5ecd2fb444f52802955903937b9ccd","status":"affected","version":"6286bbb40576ffadfde206c332b61345c19af57f","versionType":"git"},{"lessThan":"d87cb889dc7ab1f2deecadf2a5e9023184bd7900","status":"affected","version":"6286bbb40576ffadfde206c332b61345c19af57f","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/cpufreq/apple-soc-cpufreq.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.2"},{"lessThan":"6.2","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.51","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.4","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.3-rc1","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.51","versionStartIncluding":"6.2","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.4","versionStartIncluding":"6.2","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3-rc1","versionStartIncluding":"6.2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: apple-soc: Fix OPP table cleanup\n\napple_soc_cpufreq_init() adds OPP tables from firmware, but\nsome failure paths do not remove them. The driver also uses\ndev_pm_opp_remove_all_dynamic(), which is not the right cleanup\nhelper for OPP tables loaded from firmware.\n\nUse the cpumask OPP helper after the policy CPU mask has been\npopulated. Pair it with the matching cpumask remove helper on\nfailure paths and in apple_soc_cpufreq_exit(). This also removes\nthe separate dev_pm_opp_set_sharing_cpus() call, as the cpumask\nhelper loads the DT OPP tables for all CPUs in the policy."}],"providerMetadata":{"dateUpdated":"2026-09-11T19:44:41.072Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/7c19b94c625dc7042b0a7dff4c8da158358ffa2c"},{"url":"https://git.kernel.org/stable/c/36c55d118d5ecd2fb444f52802955903937b9ccd"},{"url":"https://git.kernel.org/stable/c/d87cb889dc7ab1f2deecadf2a5e9023184bd7900"}],"title":"cpufreq: apple-soc: Fix OPP table cleanup","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-89572","datePublished":"2026-09-11T19:44:41.072Z","dateReserved":"2026-09-11T19:38:34.727Z","dateUpdated":"2026-09-11T19:44:41.072Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-11 20:19:41","lastModifiedDate":"2026-09-11 20:19:41","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"89572","Ordinal":"1","Title":"cpufreq: apple-soc: Fix OPP table cleanup","CVE":"CVE-2026-89572","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"89572","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\ncpufreq: apple-soc: Fix OPP table cleanup\n\napple_soc_cpufreq_init() adds OPP tables from firmware, but\nsome failure paths do not remove them. The driver also uses\ndev_pm_opp_remove_all_dynamic(), which is not the right cleanup\nhelper for OPP tables loaded from firmware.\n\nUse the cpumask OPP helper after the policy CPU mask has been\npopulated. Pair it with the matching cpumask remove helper on\nfailure paths and in apple_soc_cpufreq_exit(). This also removes\nthe separate dev_pm_opp_set_sharing_cpus() call, as the cpumask\nhelper loads the DT OPP tables for all CPUs in the policy.","Type":"Description","Title":"cpufreq: apple-soc: Fix OPP table cleanup"}]}}}