VulnerabilityPublished 11 Sep 2026Updated 21 Oct 2026

CVE-2026-89572: Linux kernel · cpufreq: apple-soc: Fix OPP table cleanup

Affects Linux kernelSource CVE Database V5

Not known to be exploited · fixed in d87cb889dc7ab1f2deecadf2a5e9023184bd7900 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 12:55 UTC

Severity

Unrated

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in d87cb889dc7ab1f2deecadf2a5e9023184bd7900, d28ad9bb050e80770f0b644304cb75932e289238, 36c55d118d5ecd2fb444f52802955903937b9ccd +2

Exploitation evidence

Disclosed: evidence found.
CVE published 11 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ 6286bbb40576ffadfde206c332b61345c19af57f, < d87cb889dc7ab1f2deecadf2a5e9023184bd7900	Fixed in d87cb889dc7ab1f2deecadf2a5e9023184bd7900
LinuxLinux	Affected ≥ 6286bbb40576ffadfde206c332b61345c19af57f, < d28ad9bb050e80770f0b644304cb75932e289238	Fixed in d28ad9bb050e80770f0b644304cb75932e289238
LinuxLinux	Affected ≥ 6286bbb40576ffadfde206c332b61345c19af57f, < 36c55d118d5ecd2fb444f52802955903937b9ccd	Fixed in 36c55d118d5ecd2fb444f52802955903937b9ccd
LinuxLinux	Affected ≥ 6286bbb40576ffadfde206c332b61345c19af57f, < 12b54e5aab7c0850d39a51a32200f76d5e15040e	Fixed in 12b54e5aab7c0850d39a51a32200f76d5e15040e
LinuxLinux	Affected ≥ 6286bbb40576ffadfde206c332b61345c19af57f, < 7c19b94c625dc7042b0a7dff4c8da158358ffa2c	Fixed in 7c19b94c625dc7042b0a7dff4c8da158358ffa2c
LinuxLinux	Affected =6.2	Fixed in–

Description

In the Linux kernel, the following vulnerability has been resolved: cpufreq: apple-soc: Fix OPP table cleanup apple_soc_cpufreq_init() adds OPP tables from firmware, but some failure paths do not remove them. The driver also uses dev_pm_opp_remove_all_dynamic(), which is not the right cleanup helper for OPP tables loaded from firmware. Use the cpumask OPP helper after the policy CPU mask has been populated. Pair it with the matching cpumask remove helper on failure paths and in apple_soc_cpufreq_exit(). This also removes the separate dev_pm_opp_set_sharing_cpus() call, as the cpumask helper loads the DT OPP tables for all CPUs in the policy.

References

Community reviews

Loading reviews…