The vulnerability in the Linux kernel's HID sensor custom driver (CVE-2026-89626) involved the function hid_sensor_custom_add_attributes() which creates sysfs groups for each custom sensor field. If sysfs_create_group() failed after some groups were created, the function returned an error without removing the already created groups. This could leave enable_sensor exposed to pointers referencing freed memory. The patch adds a local unwind path to remove previously created groups on failure, preventing enable_sensor from accessing invalid pointers.

The vulnerability could lead to enable_sensor accessing pointers to freed memory, which may cause undefined behavior or system instability. No specific exploitation details or impact severity are provided.

A fix has been implemented in the Linux kernel to properly clean up sysfs groups on failure in the HID sensor custom driver. Users should update to the fixed kernel version once available. No additional mitigation steps are indicated.