CVE-2026-89626 HID: sensor: custom: Fix field sysfs group cleanup on failure
A failure in sysfs group creation leaves dangling pointers, potentially causing a use-after-free or memory corruption in the Linux kernel HID sensor driver.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-89626?
CVE-2026-89626 is a high-severity memory corruption vulnerability in Linux, published on 11 Sep 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
HID: sensor: custom: Fix field sysfs group cleanup on failure
hid_sensor_custom_add_attributes() creates one sysfs group for each custom sensor field. If sysfs_create_group() fails after some groups have already been created, the function returns the error without removing the previously created groups.
Add a local unwind path to remove the groups that were already created. With enable_sensor exposed only after the field attributes are ready, this path can free sensor_inst->fields without leaving enable_sensor able to access pointers into that array.
Which versions are affected by CVE-2026-89626?
How do I fix CVE-2026-89626?
Apply the vendor's patch.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2026-89626 being exploited?
There is no known exploitation of CVE-2026-89626 in the wild and no public exploit code.
Sources
Also known as AZL-100428, BELL-CVE-2026-89626, DEBIAN-CVE-2026-89626, GHSA-5r2j-h2g4-5h5v, UBUNTU-CVE-2026-89626.