Skip to main content
CVE-2026-89934VulnerabilityPublished Updated

Microsoft · iio: light: ltrf216a: fix runtime PM reference leak in error path

Affects MicrosoftSource GCVE Database

0
Compare
Authoritative record:CVE-2026-89934· Low

Not known to be exploited · fixed in c132aef0e757a39036b1d40faf0569f2e343b13e : update Microsoft when convenient.

Data as of 7 Nov 2026, 13:02 UTC

Severity
Low

Rated by Threat Radar · CVSS not yet scored by NVD

Thin evidence

One scorer or none
Patch
Available – fixed in c132aef0e757a39036b1d40faf0569f2e343b13e, c4f003d8578f5718fe1ec332bc89f9ff69fd205b, a065b8b596d23de4b2e108d78ba34d17e723c865 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 16 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 7 Nov 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < c132aef0e757a39036b1d40faf0569f2e343b13e
Fixed in
  • c132aef0e757a39036b1d40faf0569f2e343b13e
LinuxLinuxAffected
  • ≥ 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < c4f003d8578f5718fe1ec332bc89f9ff69fd205b
Fixed in
  • c4f003d8578f5718fe1ec332bc89f9ff69fd205b
LinuxLinuxAffected
  • ≥ 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < a065b8b596d23de4b2e108d78ba34d17e723c865
Fixed in
  • a065b8b596d23de4b2e108d78ba34d17e723c865
LinuxLinuxAffected
  • ≥ 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < 0614928a3eda35bddd8c2f02311e286b59bbe746
Fixed in
  • 0614928a3eda35bddd8c2f02311e286b59bbe746
LinuxLinuxAffected
  • ≥ 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < 80e7381e8cccb543397572af153865f34aaf4353
Fixed in
  • 80e7381e8cccb543397572af153865f34aaf4353
LinuxLinuxAffected
  • ≥ 83f0bcd40d5cf88870d2f2bb8b97c772b92a3d1f, < 4bf5525c6ff4a9f8df35bcc227a918b6396b2cb5
Fixed in
  • 4bf5525c6ff4a9f8df35bcc227a918b6396b2cb5

Description

CVE-2026-89934 addresses a runtime power management reference leak in the error path of the ltrf216a light sensor driver within the iio subsystem. The issue affects Microsoft products versions 3.0 and 4.0. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…