Strix
64K

CVE-2026-89933

Unknown

Last modified

CVE-2026-89933 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID (IFX3100), i2c_client_get_device_id() returns NULL: the ACPI-derived client name does not match the driver's i2c_device_id table. dps310_probe() then dereferences that NULL pointer in "iio->name = id->name" and crashes the kernel during probe. The IIO device name is always "dps310", so set it directly and drop the now-unused device-id lookup..

Description

In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID (IFX3100), i2c_client_get_device_id() returns NULL: the ACPI-derived client name does not match the driver's i2c_device_id table. dps310_probe() then dereferences that NULL pointer in "iio->name = id->name" and crashes the kernel during probe. The IIO device name is always "dps310", so set it directly and drop the now-unused device-id lookup.

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 72ff282819d0526d3e4417c2a61414557981b5af, < a32a39da18e01b20c2ab65af9be34dc870187382; >= 72ff282819d0526d3e4417c2a61414557981b5af, < bc7b09e701b4175fc683b579fcdef3bfac809239; >= 72ff282819d0526d3e4417c2a61414557981b5af, < 7ded5b76ec2df6a3fb1bfde0d1869cde363fef30; >= 72ff282819d0526d3e4417c2a61414557981b5af, < 3fa189573cca284ae663bfd2d5b9ed755bec5e9d; >= 72ff282819d0526d3e4417c2a61414557981b5af, < 26e9213898fc949923188ef0aeea31fc87708836
LinuxLinux5.18

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-89933?
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID (IFX3100), i2c_client_get_device_id() returns NULL: the ACPI-derived client name does not match the driver's i2c_device_id table. dps310_probe() then dereferences that NULL pointer in "iio->name = id->name" and crashes the kernel during probe. The IIO device name is always "dps310", so set it directly and drop the now-unused device-id lookup.
How severe is CVE-2026-89933?
Severity scoring for CVE-2026-89933 is pending analysis.
How do I fix CVE-2026-89933?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-89933?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST