GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

FKIE_CVE-2026-89937

Vulnerability from fkie_nvd - Published: 2026-09-16 11:17 - Updated: 2026-09-16 11:17
Severity
Summary
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sgp30: Handle IAQ thread creation failure kthread_run() can fail and return an error pointer, but sgp_probe() stores it and returns success, so the device is registered without its IAQ thread and sgp_remove() later passes the error pointer to kthread_stop(). Return the error from probe instead.
References
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/1135d6875d2dbda3f6ec718f3421a6ce4378bd63
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/2d386efb4c37a50739db19c7c8e49564fd53a570
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3462c13bb0f50dec09235adb7fd04b6f617cf0cc
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/3c6b52b258e65a584e3f5122ed7f406bc89a946e
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/44d52c8b1c6da7ac1b0dffeeff6de68370746775
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/a5aaea17a1834d7254ff597e4d5e1bc60dfc4800
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bae0316c087b1ef625844003fe37e803a13819f3
416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/bffd0655a35402b2df8857699f8248e5a534d214
Impacted products
Vendor Product Version
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/iio/chemical/sgp30.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "bffd0655a35402b2df8857699f8248e5a534d214",
              "status": "affected",
              "version": "ce514124161ac2ceb13d10b6c40cbf05c8f0cc91",
              "versionType": "git"
            },
            {
              "lessThan": "bae0316c087b1ef625844003fe37e803a13819f3",
              "status": "affected",
              "version": "ce514124161ac2ceb13d10b6c40cbf05c8f0cc91",
              "versionType": "git"
            },
            {
              "lessThan": "3c6b52b258e65a584e3f5122ed7f406bc89a946e",
              "status": "affected",
              "version": "ce514124161ac2ceb13d10b6c40cbf05c8f0cc91",
              "versionType": "git"
            },
            {
              "lessThan": "3462c13bb0f50dec09235adb7fd04b6f617cf0cc",
              "status": "affected",
              "version": "ce514124161ac2ceb13d10b6c40cbf05c8f0cc91",
              "versionType": "git"
            },
            {
              "lessThan": "a5aaea17a1834d7254ff597e4d5e1bc60dfc4800",
              "status": "affected",
              "version": "ce514124161ac2ceb13d10b6c40cbf05c8f0cc91",
              "versionType": "git"
            },
            {
              "lessThan": "2d386efb4c37a50739db19c7c8e49564fd53a570",
              "status": "affected",
              "version": "ce514124161ac2ceb13d10b6c40cbf05c8f0cc91",
              "versionType": "git"
            },
            {
              "lessThan": "44d52c8b1c6da7ac1b0dffeeff6de68370746775",
              "status": "affected",
              "version": "ce514124161ac2ceb13d10b6c40cbf05c8f0cc91",
              "versionType": "git"
            },
            {
              "lessThan": "1135d6875d2dbda3f6ec718f3421a6ce4378bd63",
              "status": "affected",
              "version": "ce514124161ac2ceb13d10b6c40cbf05c8f0cc91",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/iio/chemical/sgp30.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.1"
            },
            {
              "lessThan": "5.1",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.270",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.221",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.188",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.157",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.110",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.51",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.2.*",
              "status": "unaffected",
              "version": "7.2.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\niio: chemical: sgp30: Handle IAQ thread creation failure\n\nkthread_run() can fail and return an error pointer, but sgp_probe() stores\nit and returns success, so the device is registered without its IAQ thread\nand sgp_remove() later passes the error pointer to kthread_stop(). Return\nthe error from probe instead."
    }
  ],
  "id": "CVE-2026-89937",
  "lastModified": "2026-09-16T11:17:03.177",
  "metrics": {},
  "published": "2026-09-16T11:17:03.177",
  "references": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/1135d6875d2dbda3f6ec718f3421a6ce4378bd63"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/2d386efb4c37a50739db19c7c8e49564fd53a570"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/3462c13bb0f50dec09235adb7fd04b6f617cf0cc"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/3c6b52b258e65a584e3f5122ed7f406bc89a946e"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/44d52c8b1c6da7ac1b0dffeeff6de68370746775"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/a5aaea17a1834d7254ff597e4d5e1bc60dfc4800"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/bae0316c087b1ef625844003fe37e803a13819f3"
    },
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "url": "https://git.kernel.org/stable/c/bffd0655a35402b2df8857699f8248e5a534d214"
    }
  ],
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
  "vulnStatus": "Received"
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.