UnratedFix available
i2c: mux: Fix channel node leak on adapter add failure
Type: advisorySources: OSV
In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2c_mux_add_adapter() takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data without dropping that reference. Release the channel node before freeing the private data.
- Products
- Kernel
- Affected versions
- Not specified
- Fixed versions
- 5.10.270, 5.15.221, 6.1.188, 6.12.110, 6.18.51, 6.6.157, 7.2.5
- CVEs
- CVE-2026-89982
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 6 Nov 2026, 02:27 UTC · Revision 1
Source evidence
i2c: mux: Fix channel node leak on adapter add failure
core-osv · Original sourcePublished 16 Sept 2026, 10:32 UTC
In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2c_mux_add_adapter() takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data without dropping that reference. Release the channel node before freeing the private data.
osv:CVE-2026-89982
Kernel
Fixed versions: 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.110, 6.18.51, 7.2.5
Complete source record
{
"id": "1e4b95fe74aec09155d0c63335f370121003015555299cb266b872ee81ce7575",
"url": "https://osv.dev/vulnerability/CVE-2026-89982",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "i2c: mux: Fix channel node leak on adapter add failure",
"summary": "In the Linux kernel, the following vulnerability has been resolved: i2c: mux: Fix channel node leak on adapter add failure i2c_mux_add_adapter() takes a reference to the Device Tree channel node before registering the new adapter. If adapter registration fails, the error path frees the private data without dropping that reference. Release the channel node before freeing the private data.",
"evidence": "osv:CVE-2026-89982",
"products": [
{
"name": {
"value": "Kernel",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "5.10.270",
"evidence": "/affected/1/ranges"
},
{
"value": "5.15.221",
"evidence": "/affected/1/ranges"
},
{
"value": "6.1.188",
"evidence": "/affected/1/ranges"
},
{
"value": "6.6.157",
"evidence": "/affected/1/ranges"
},
{
"value": "6.12.110",
"evidence": "/affected/1/ranges"
},
{
"value": "6.18.51",
"evidence": "/affected/1/ranges"
},
{
"value": "7.2.5",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "CVE-2026-89982",
"aliases": [
"CVE-2026-89982"
],
"affected": [
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "bc45449b1444611d68466ae7f45f235420d79019"
},
{
"fixed": "4f42f70afd2447f3c82ca69d1e03466a75348ba9"
},
{
"fixed": "4c9bc46a2a4afb7a11c48d33bdf19febab431015"
},
{
"fixed": "dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1"
},
{
"fixed": "0927153f2abf48b6cc3e5f27063a17f7a8d47f38"
},
{
"fixed": "b580f062b24c4eef562f08f210c028adb34ef14e"
},
{
"fixed": "2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5"
},
{
"fixed": "694e7e6edf249723ca7d3ef77c2ca1badfc78dc4"
},
{
"fixed": "385c7af4e3b95d0769fd211831674e83b16a2ebf"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89982.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "3.5.0"
},
{
"fixed": "5.10.270"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.221"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.188"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.157"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.110"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.51"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.2.5"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-89982.json"
}
}
],
"modified": "2026-10-28T02:30:45.953691784Z",
"provider": "osv",
"references": [
"https://git.kernel.org/stable/c/0927153f2abf48b6cc3e5f27063a17f7a8d47f38",
"https://git.kernel.org/stable/c/2b3b06cb709c4bf75a3fe3da3a0ca368ee3b40e5",
"https://git.kernel.org/stable/c/385c7af4e3b95d0769fd211831674e83b16a2ebf",
"https://git.kernel.org/stable/c/4c9bc46a2a4afb7a11c48d33bdf19febab431015",
"https://git.kernel.org/stable/c/4f42f70afd2447f3c82ca69d1e03466a75348ba9",
"https://git.kernel.org/stable/c/694e7e6edf249723ca7d3ef77c2ca1badfc78dc4",
"https://git.kernel.org/stable/c/b580f062b24c4eef562f08f210c028adb34ef14e",
"https://git.kernel.org/stable/c/dd2c1e6747b17b24ecddd48a7bb6bb964c2793d1",
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89982.json",
"https://nvd.nist.gov/vuln/detail/CVE-2026-89982",
"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
],
"provider_metadata": {
"cna_assigner": "Linux",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/89xxx/CVE-2026-89982.json"
}
},
"related_cves": [
{
"value": "CVE-2026-89982",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 514271,
"published_at": "2026-09-16T10:32:58.747+00:00"
}