# HID: sensor: custom: Fix field sysfs group cleanup on failure

CVE record · `CVE-2026-89626`

- **Identifiers:** `CVE-2026-89626`
- **State:** Confirmed
- **Severity:** CVSS 8.8 High
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 11 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:45 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 416194933af63bd58d03b7605b1ebc1711186838` (git)
  - affected: `4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before d0e15091e88d18e30b67daf85b88f6528bb9bf41` (git)
  - affected: `4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 10b05fafff932e325896d59dde40938954ab4577` (git)
  - affected: `4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 2409779f3096fcef41bcf57b5f4887d0fa0dc8dd` (git)
  - affected: `4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 79154fad98ee843e5363940841e2d831503c190a` (git)
  - affected: `4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before f3f37b937a6ea2a00fb5e6189e74f855caa43eb5` (git)
  - affected: `4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before d96f8958d4469ac02d9c563686cdd968005b944d` (git)
  - affected: `4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 3789d0802ddb4b3be04062caf4bfadd23496e9a7` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `4.1`
  - unaffected: `before 4.1` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.109 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.50 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.4 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

- 8.8 High, CVSS 3.1: `CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H`, from CNA (Linux)

- **CISA KEV:** Not listed.
- **EPSS:** 0.0035, the 29th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-89626](https://www.cve.org/CVERecord?id=CVE-2026-89626)
- [NVD: CVE-2026-89626](https://nvd.nist.gov/vuln/detail/CVE-2026-89626)

### References from the CNA

- <https://git.kernel.org/stable/c/416194933af63bd58d03b7605b1ebc1711186838>
- <https://git.kernel.org/stable/c/d0e15091e88d18e30b67daf85b88f6528bb9bf41>
- <https://git.kernel.org/stable/c/10b05fafff932e325896d59dde40938954ab4577>
- <https://git.kernel.org/stable/c/2409779f3096fcef41bcf57b5f4887d0fa0dc8dd>
- <https://git.kernel.org/stable/c/79154fad98ee843e5363940841e2d831503c190a>
- <https://git.kernel.org/stable/c/f3f37b937a6ea2a00fb5e6189e74f855caa43eb5>
- <https://git.kernel.org/stable/c/d96f8958d4469ac02d9c563686cdd968005b944d>
- <https://git.kernel.org/stable/c/3789d0802ddb4b3be04062caf4bfadd23496e9a7>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-89626>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-89626/>. Everything for agents: <https://agentprime.io/llms.txt>.