In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path When… (CVE-2026-89769)
A vulnerability in the Linux kernel's clocksource driver for nxp-pit has been fixed. The issue involves an IRQ leak on the cpuhp_setup_state error path, where failure to free a registered IRQ leads to a dangling pointer. This dangling pointer can cause a use-after-free condition if the IRQ fires after the pointer is freed. The fix properly releases the IRQ during error handling to prevent this condition.
AI Analysis
Technical Summary
The Linux kernel vulnerability CVE-2026-89769 concerns the clocksource/drivers/nxp-pit component. When cpuhp_setup_state fails after pit_clockevent_per_cpu_init successfully calls request_irq, the error handling skips freeing the registered IRQ, causing an IRQ leak. Subsequently, kfree(pit) frees the memory, leaving a dangling pointer registered as the interrupt handler's dev_id. This can lead to a use-after-free if the IRQ triggers afterward. The patch fixes this by invoking pit_clockevent_per_cpu_exit to release the IRQ properly before continuing cleanup.
Potential Impact
The vulnerability can cause a use-after-free condition in the Linux kernel, which may lead to system instability or potential kernel crashes if the IRQ fires after the pointer is freed. No information about active exploitation is available.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to properly release the IRQ on the error path. Users should apply the official kernel updates that include this patch once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or kernel mailing lists for the official fix and update guidance.
In the Linux kernel, the following vulnerability has been resolved: clocksource/drivers/nxp-pit: Fix IRQ leak on cpuhp_setup_state error path When… (CVE-2026-89769)
Description
A vulnerability in the Linux kernel's clocksource driver for nxp-pit has been fixed. The issue involves an IRQ leak on the cpuhp_setup_state error path, where failure to free a registered IRQ leads to a dangling pointer. This dangling pointer can cause a use-after-free condition if the IRQ fires after the pointer is freed. The fix properly releases the IRQ during error handling to prevent this condition.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The Linux kernel vulnerability CVE-2026-89769 concerns the clocksource/drivers/nxp-pit component. When cpuhp_setup_state fails after pit_clockevent_per_cpu_init successfully calls request_irq, the error handling skips freeing the registered IRQ, causing an IRQ leak. Subsequently, kfree(pit) frees the memory, leaving a dangling pointer registered as the interrupt handler's dev_id. This can lead to a use-after-free if the IRQ triggers afterward. The patch fixes this by invoking pit_clockevent_per_cpu_exit to release the IRQ properly before continuing cleanup.
Potential Impact
The vulnerability can cause a use-after-free condition in the Linux kernel, which may lead to system instability or potential kernel crashes if the IRQ fires after the pointer is freed. No information about active exploitation is available.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to properly release the IRQ on the error path. Users should apply the official kernel updates that include this patch once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory or kernel mailing lists for the official fix and update guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-8vp9-2h56-3438
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-89769"]
Threat ID: 6aa49ff955bf5e2cf5a865bf
Added to database: 09/12/2026, 00:42:33 UTC
Last enriched: 09/12/2026, 00:48:40 UTC
Last updated: 09/12/2026, 00:48:40 UTC
Views: 1
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.