CVE-2026-89824drm/panel-edp: fix i2c adapter leak on probe failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: drm/panel-edp: fix i2c adapter leak on probe failure Make sure to drop the i2c adapter reference on probe failure (e.g. probe deferral) and on driver unbind also if a devicetree redundantly uses the 'ddc-i2c-bus' property to point to the aux ddc bus.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from cc5a3fc041f0104d97ac61b0423ec533d7a93214 before f933d0f6fcd6280ce709553d394c30e9f7cc1b8c; from cc5a3fc041f0104d97ac61b0423ec533d7a93214 before 8d9e6dffaea9b1282f8dc82f2d5e3cbd64e11fb3; from cc5a3fc041f0104d97ac61b0423ec533d7a93214 before e048a11cf4649e03f194e16eb809e57ffc9eb5b6; from cc5a3fc041f0104d97ac61b0423ec533d7a93214 before 0259846b15a665c6762a86b3fa0eb8b674b35d1c; from cc5a3fc041f0104d97ac61b0423ec533d7a93214 before 972afe6d5314037556bf6b3e635d7a06547064ee; from cc5a3fc041f0104d97ac61b0423ec533d7a93214 before e2a9e291275a74e309a21cbb1def6296a72d6aed | CNA record |
References
- https://git.kernel.org/stable/c/f933d0f6fcd6280ce709553d394c30e9f7cc1b8c
- https://git.kernel.org/stable/c/8d9e6dffaea9b1282f8dc82f2d5e3cbd64e11fb3
- https://git.kernel.org/stable/c/e048a11cf4649e03f194e16eb809e57ffc9eb5b6
- https://git.kernel.org/stable/c/0259846b15a665c6762a86b3fa0eb8b674b35d1c
- https://git.kernel.org/stable/c/972afe6d5314037556bf6b3e635d7a06547064ee
- https://git.kernel.org/stable/c/e2a9e291275a74e309a21cbb1def6296a72d6aed
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.