CVE-2026-89457: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-89457DEBIAN-CVE-2026-89457
Published 11-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-89457 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.18% chance of exploitation in the next 30 days, higher than 6.8% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.18%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
OPENSUSE-SU-2026:11805-1

Timeline

  1. 11-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysfs show/store handlers call a discipline callback that dereferences device->private, either directly or through the DASD_DEFINE_ATTR() macro. During dasd_generic_set_online() the discipline is assigned before check_device() allocates device->private, so an unprivileged read of one of these world-readable attributes in that window dereferences a NULL pointer and panics. Guard the dereference inside each callback that actually touches device->private.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.18%

Chance of exploitation in the next 30 days

Percentile

7%

Versus all other CVEs

30-day change

0.00 pp

From 0.18% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.18%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu165 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.111-1 | < 7.2.6-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux1 product
  • linux≥ c729696bcf8b23450043dd9c9972c15e53419ae4, < 644b666c202cce12ccfcf9ded67089b18f4f7659 | ≥ c729696bcf8b23450043dd9c9972c15e53419ae4, < 4a042d8e5f34282577ece50515cea8bb1246914d | ≥ c729696bcf8b23450043dd9c9972c15e53419ae4, < bd8b4572528f9604a13bf3c7c2a167f5cf222f72 | ≥ c729696bcf8b23450043dd9c9972c15e53419ae4, < 57db27ccc162afe0726cffec0ae62e410ed2d0e9 | ≥ c729696bcf8b23450043dd9c9972c15e53419ae4, < 536407b272402af679155910d7fdeeb4834eefb9 | ≥ c729696bcf8b23450043dd9c9972c15e53419ae4, < 6452c13646af7c13d7f6668b6690cfb2427e7f7b | ≥ c729696bcf8b23450043dd9c9972c15e53419ae4, < 449f3bada7a9fad8b8cdf4bb20baf27ee9ca56c5 | ≥ c729696bcf8b23450043dd9c9972c15e53419ae4, < 2a1780f9fc2493bd34c418a0be6fc58943afcecf | 5.3

3 vendors · 168 products

References

12 links
Show all 12 references