CVE-2026-89933
Published Sep 16, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: iio: pressure: dps310: fix NULL pointer dereference on ACPI probe When the device is enumerated through its ACPI HID (IFX3100), i2c_client_get_device_id() returns NULL: the ACPI-derived client name does not match the driver's i2c_device_id table. dps310_probe() then dereferences that NULL pointer in "iio->name = id->name" and crashes the kernel during probe. The IIO device name is always "dps310", so set it directly and drop the now-unused device-id lookup.
Is your site exposed to CVE-2026-89933?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/26e9213898fc949923188ef0aeea31fc87708836
https://git.kernel.org/stable/c/3fa189573cca284ae663bfd2d5b9ed755bec5e9d
https://git.kernel.org/stable/c/7ded5b76ec2df6a3fb1bfde0d1869cde363fef30
https://git.kernel.org/stable/c/a32a39da18e01b20c2ab65af9be34dc870187382
https://git.kernel.org/stable/c/bc7b09e701b4175fc683b579fcdef3bfac809239
Frequently Asked Questions
What is CVE-2026-89933? +
In the Linux kernel, the following vulnerability has been resolved:
iio: pressure: dps310: fix NULL pointer dereference on ACPI probe
When the device is enumerated through its ACPI HID (IFX3100),
i2c_client_get_device_id() returns NULL: the ACPI-derived client name
does not match the driver's i2c_device_id table. dps310_probe() then
dereferences that NULL pointer in "iio->name = id->name" and crashes the
kernel during probe.
The IIO device name is always "dps310", so set it directly and drop the
now-unused device-id lookup.
How do I check if I'm vulnerable to CVE-2026-89933? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.