{"api_version":"1","generated_at":"2026-09-18T00:52:45+00:00","cve":"CVE-2026-89982","urls":{"html":"https://cve.report/CVE-2026-89982","api":"https://cve.report/api/cve/CVE-2026-89982.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-89982","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-89982"},"summary":{"title":"i2c: mux: Fix channel node leak on adapter add failure","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: mux: Fix channel node leak on adapter add failure\n\ni2c_mux_add_adapter() takes a reference to the Device Tree channel node\nbefore registering the new adapter. If adapter registration fails, the\nerror path frees the private data without dropping that reference.\n\nRelease the channel node before freeing the private data.","state":"PUBLISHED","assigner":"Linux","published_at":"2026-09-16 11:17:09","updated_at":"2026-09-16 11:17:09"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/694e7e6edf249723ca7d3ef77c2ca1badfc78dc4","name":"https://git.kernel.org/stable/c/694e7e6edf249723ca7d3ef77c2ca1badfc78dc4","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5","name":"https://git.kernel.org/stable/c/2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/4c9bc46a2a4afb7a11c48d33bdf19febab431015","name":"https://git.kernel.org/stable/c/4c9bc46a2a4afb7a11c48d33bdf19febab431015","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/b580f062b24c4eef562f08f210c028adb34ef14e","name":"https://git.kernel.org/stable/c/b580f062b24c4eef562f08f210c028adb34ef14e","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/0927153f2abf48b6cc3e5f27063a17f7a8d47f38","name":"https://git.kernel.org/stable/c/0927153f2abf48b6cc3e5f27063a17f7a8d47f38","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1","name":"https://git.kernel.org/stable/c/dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/4f42f70afd2447f3c82ca69d1e03466a75348ba9","name":"https://git.kernel.org/stable/c/4f42f70afd2447f3c82ca69d1e03466a75348ba9","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/385c7af4e3b95d0769fd211831674e83b16a2ebf","name":"https://git.kernel.org/stable/c/385c7af4e3b95d0769fd211831674e83b16a2ebf","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-89982","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-89982","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected bc45449b1444611d68466ae7f45f235420d79019 4f42f70afd2447f3c82ca69d1e03466a75348ba9 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected bc45449b1444611d68466ae7f45f235420d79019 4c9bc46a2a4afb7a11c48d33bdf19febab431015 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected bc45449b1444611d68466ae7f45f235420d79019 dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected bc45449b1444611d68466ae7f45f235420d79019 0927153f2abf48b6cc3e5f27063a17f7a8d47f38 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected bc45449b1444611d68466ae7f45f235420d79019 b580f062b24c4eef562f08f210c028adb34ef14e git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected bc45449b1444611d68466ae7f45f235420d79019 2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected bc45449b1444611d68466ae7f45f235420d79019 694e7e6edf249723ca7d3ef77c2ca1badfc78dc4 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected bc45449b1444611d68466ae7f45f235420d79019 385c7af4e3b95d0769fd211831674e83b16a2ebf git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 3.5","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 3.5 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.10.270 5.10.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.15.221 5.15.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.1.188 6.1.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.6.157 6.6.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.110 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.51 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.2.5 7.2.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.3-rc1 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["drivers/i2c/i2c-mux.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"4f42f70afd2447f3c82ca69d1e03466a75348ba9","status":"affected","version":"bc45449b1444611d68466ae7f45f235420d79019","versionType":"git"},{"lessThan":"4c9bc46a2a4afb7a11c48d33bdf19febab431015","status":"affected","version":"bc45449b1444611d68466ae7f45f235420d79019","versionType":"git"},{"lessThan":"dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1","status":"affected","version":"bc45449b1444611d68466ae7f45f235420d79019","versionType":"git"},{"lessThan":"0927153f2abf48b6cc3e5f27063a17f7a8d47f38","status":"affected","version":"bc45449b1444611d68466ae7f45f235420d79019","versionType":"git"},{"lessThan":"b580f062b24c4eef562f08f210c028adb34ef14e","status":"affected","version":"bc45449b1444611d68466ae7f45f235420d79019","versionType":"git"},{"lessThan":"2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5","status":"affected","version":"bc45449b1444611d68466ae7f45f235420d79019","versionType":"git"},{"lessThan":"694e7e6edf249723ca7d3ef77c2ca1badfc78dc4","status":"affected","version":"bc45449b1444611d68466ae7f45f235420d79019","versionType":"git"},{"lessThan":"385c7af4e3b95d0769fd211831674e83b16a2ebf","status":"affected","version":"bc45449b1444611d68466ae7f45f235420d79019","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["drivers/i2c/i2c-mux.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.5"},{"lessThan":"3.5","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.270","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.221","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.188","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.157","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.110","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.51","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.5","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.3-rc1","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.10.270","versionStartIncluding":"3.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"5.15.221","versionStartIncluding":"3.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.188","versionStartIncluding":"3.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.157","versionStartIncluding":"3.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.110","versionStartIncluding":"3.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.51","versionStartIncluding":"3.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.5","versionStartIncluding":"3.5","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3-rc1","versionStartIncluding":"3.5","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: mux: Fix channel node leak on adapter add failure\n\ni2c_mux_add_adapter() takes a reference to the Device Tree channel node\nbefore registering the new adapter. If adapter registration fails, the\nerror path frees the private data without dropping that reference.\n\nRelease the channel node before freeing the private data."}],"providerMetadata":{"dateUpdated":"2026-09-16T10:32:58.747Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/4f42f70afd2447f3c82ca69d1e03466a75348ba9"},{"url":"https://git.kernel.org/stable/c/4c9bc46a2a4afb7a11c48d33bdf19febab431015"},{"url":"https://git.kernel.org/stable/c/dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1"},{"url":"https://git.kernel.org/stable/c/0927153f2abf48b6cc3e5f27063a17f7a8d47f38"},{"url":"https://git.kernel.org/stable/c/b580f062b24c4eef562f08f210c028adb34ef14e"},{"url":"https://git.kernel.org/stable/c/2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5"},{"url":"https://git.kernel.org/stable/c/694e7e6edf249723ca7d3ef77c2ca1badfc78dc4"},{"url":"https://git.kernel.org/stable/c/385c7af4e3b95d0769fd211831674e83b16a2ebf"}],"title":"i2c: mux: Fix channel node leak on adapter add failure","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-89982","datePublished":"2026-09-16T10:32:58.747Z","dateReserved":"2026-09-11T19:38:34.779Z","dateUpdated":"2026-09-16T10:32:58.747Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-09-16 11:17:09","lastModifiedDate":"2026-09-16 11:17:09","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"89982","Ordinal":"1","Title":"i2c: mux: Fix channel node leak on adapter add failure","CVE":"CVE-2026-89982","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"89982","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\ni2c: mux: Fix channel node leak on adapter add failure\n\ni2c_mux_add_adapter() takes a reference to the Device Tree channel node\nbefore registering the new adapter. If adapter registration fails, the\nerror path frees the private data without dropping that reference.\n\nRelease the channel node before freeing the private data.","Type":"Description","Title":"i2c: mux: Fix channel node leak on adapter add failure"}]}}}