CVE record · CVE-2026-89883

media: rc: sunxi-cir: Unregister rc device on probe failure

CVSS 7.8 HighEPSS 0.0017 · 6th percentile

Published by the CVE Program (CNA: Linux) at 16 Sept 2026, 10:31 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f to before 4655a591478e4b31a3396695a2457daad9d4c899 git
  • affected b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f to before 4efd7146dcf959afe64e9c51531cd8f82e60eab6 git
  • affected b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f to before 826763adbd8bd3137c5b3756650da473dc6216d5 git
  • affected b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f to before 59951b8a87ef4fb4b5b9409f70ba07663681a040 git
  • affected b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f to before 5b58d8c206f37525c8217171e1f3e91dd2fa55e5 git
  • affected b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f to before 5e6f5bffaa80fc8ecce348ec0e34fed9d843e47e git
  • affected b4e3e59fb59c214c5bcf9d1bf2971f100e0dac4f to before 479aa6fa8c50f1052f1451326ef7d4d586d340c3 git
Other versions: unaffected
Linux Linux
  • affected 3.17
  • unaffected before 3.17 semver
  • unaffected 5.15.221 to 5.15.*, inclusive semver
  • unaffected 6.1.188 to 6.1.*, inclusive semver
  • unaffected 6.6.157 to 6.6.*, inclusive semver
  • unaffected 6.12.110 to 6.12.*, inclusive semver
  • unaffected 6.18.51 to 6.18.*, inclusive semver
  • unaffected 7.2.5 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-89883
CNA
Linux
Published
16 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

ScoreRatingCVSSVectorSource
7.8 High 3.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CNA (Linux)
  • CISA KEV Not listed.
  • EPSS 0.0017, the 6th percentile, on 14 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 16 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.