Connect your agent
AdvisoriesCriticalCheck your lockfilePluginHow it worksPricing Connect your agent

CVE record · CVE-2026-89626

HID: sensor: custom: Fix field sysfs group cleanup on failure

CVSS 8.8 HighEPSS 0.0035 · 29th percentile

Published by the CVE Program (CNA: Linux) at 11 Sept 2026, 19:45 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 416194933af63bd58d03b7605b1ebc1711186838 git
  • affected 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before d0e15091e88d18e30b67daf85b88f6528bb9bf41 git
  • affected 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 10b05fafff932e325896d59dde40938954ab4577 git
  • affected 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 2409779f3096fcef41bcf57b5f4887d0fa0dc8dd git
  • affected 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 79154fad98ee843e5363940841e2d831503c190a git
  • affected 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before f3f37b937a6ea2a00fb5e6189e74f855caa43eb5 git
  • affected 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before d96f8958d4469ac02d9c563686cdd968005b944d git
  • affected 4a7de0519df5e8fb89cef6ee062330ffe4b50a4d to before 3789d0802ddb4b3be04062caf4bfadd23496e9a7 git
Other versions: unaffected
Linux Linux
  • affected 4.1
  • unaffected before 4.1 semver
  • unaffected 5.10.270 to 5.10.*, inclusive semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.109 to 6.12.*, inclusive semver
  • unaffected 6.18.50 to 6.18.*, inclusive semver
  • unaffected 7.2.4 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-89626
CNA
Linux
Tags
Published
11 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
8.8 High 3.1 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0035, the 29th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 11 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.