The Linux kernel vulnerability CVE-2026-89437 concerns a potential memory leak in the platform/x86 int1092 driver. Specifically, memory allocated for device_mode_info in the parse_package() function, which is called by sar_get_data(), was not freed in certain error paths within sar_probe(). This could lead to resource leakage. The issue was resolved by changing the allocation method to device managed allocations, which automatically handle cleanup.

The vulnerability could cause memory leaks in the kernel when error conditions occur in sar_probe(), potentially leading to increased memory usage and reduced system stability over time. There is no indication of direct security impact such as privilege escalation or code execution.

This vulnerability has been resolved in the Linux kernel by converting to device managed allocations in sar_probe(). Users should update to the fixed kernel version once available. Patch status is not explicitly confirmed in the input; check the vendor advisory for current remediation guidance.