CVE-2026-89937iio: chemical: sgp30: Handle IAQ thread creation failure
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sgp30: Handle IAQ thread creation failure kthread_run() can fail and return an error pointer, but sgp_probe() stores it and returns success, so the device is registered without its IAQ thread and sgp_remove() later passes the error pointer to kthread_stop(). Return the error from probe instead.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 16, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 before bffd0655a35402b2df8857699f8248e5a534d214; from ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 before bae0316c087b1ef625844003fe37e803a13819f3; from ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 before 3c6b52b258e65a584e3f5122ed7f406bc89a946e; from ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 before 3462c13bb0f50dec09235adb7fd04b6f617cf0cc; from ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 before a5aaea17a1834d7254ff597e4d5e1bc60dfc4800; from ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 before 2d386efb4c37a50739db19c7c8e49564fd53a570; from ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 before 44d52c8b1c6da7ac1b0dffeeff6de68370746775; from ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 before 1135d6875d2dbda3f6ec718f3421a6ce4378bd63 | CNA record |
References
- https://git.kernel.org/stable/c/bffd0655a35402b2df8857699f8248e5a534d214
- https://git.kernel.org/stable/c/bae0316c087b1ef625844003fe37e803a13819f3
- https://git.kernel.org/stable/c/3c6b52b258e65a584e3f5122ed7f406bc89a946e
- https://git.kernel.org/stable/c/3462c13bb0f50dec09235adb7fd04b6f617cf0cc
- https://git.kernel.org/stable/c/a5aaea17a1834d7254ff597e4d5e1bc60dfc4800
- https://git.kernel.org/stable/c/2d386efb4c37a50739db19c7c8e49564fd53a570
- https://git.kernel.org/stable/c/44d52c8b1c6da7ac1b0dffeeff6de68370746775
- https://git.kernel.org/stable/c/1135d6875d2dbda3f6ec718f3421a6ce4378bd63
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.