SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-89597

HIGH · CVSS 7.8 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's framebuffer device (fbdev) subsystem, specifically within the uvesafb driver, where a failure during platform driver registration can lead to a registered connector callback not being properly unregistered. This oversight could result in potential instability or unexpected behavior in systems relying on this driver. Linux system administrators and developers utilizing the uvesafb driver should prioritize addressing this issue to ensure system reliability and prevent potential exploitation.

CVE
CVE-2026-89597
Severity
HIGH
CVSS
7.8
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: fbdev: uvesafb: unregister connector callback on init failure uvesafb_init() registers the v86d connector callback before registering the platform driver. If platform_driver_register() fails, the function returns the error directly and leaves the connector callback registered. The later platform-device failure path already unregisters the callback. Add the same cleanup before the final return when platform-driver registration fails. This issue was identified during our ongoing static-analysis research while reviewing kernel code.