Answer in brief
CVE-2026-89937 records a Unknown severity vulnerability in iio: chemical: sgp30: Handle IAQ thread creation failure. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
Analysis pending evidence review
HOL Guard separates source facts from reviewed analysis. See the methodology.
A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.
Analysis status
Analysis pending evidence review
Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.
The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.
| Package | Affected range | Fixed version |
|---|---|---|
| Linux/Linuxgeneric | >=ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 <bffd0655a35402b2df8857699f8248e5a534d214 || >=ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 <bae0316c087b1ef625844003fe37e803a13819f3 || >=ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 <3c6b52b258e65a584e3f5122ed7f406bc89a946e || >=ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 <3462c13bb0f50dec09235adb7fd04b6f617cf0cc || >=ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 <a5aaea17a1834d7254ff597e4d5e1bc60dfc4800 || >=ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 <2d386efb4c37a50739db19c7c8e49564fd53a570 || >=ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 <44d52c8b1c6da7ac1b0dffeeff6de68370746775 || >=ce514124161ac2ceb13d10b6c40cbf05c8f0cc91 <1135d6875d2dbda3f6ec718f3421a6ce4378bd63 | bffd0655a35402b2df8857699f8248e5a534d214, bae0316c087b1ef625844003fe37e803a13819f3, 3c6b52b258e65a584e3f5122ed7f406bc89a946e, 3462c13bb0f50dec09235adb7fd04b6f617cf0cc, a5aaea17a1834d7254ff597e4d5e1bc60dfc4800, 2d386efb4c37a50739db19c7c8e49564fd53a570, 44d52c8b1c6da7ac1b0dffeeff6de68370746775, 1135d6875d2dbda3f6ec718f3421a6ce4378bd63 |
| Linux/Linuxgeneric | 5.1 | Not reported |
Published upstream
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordSource modified
Sep 16, 2026
Evidence: source:cvelist:source_dates:source-dates:recordFirst seen by HOL
Sep 16, 2026
In the Linux kernel, the following vulnerability has been resolved: iio: chemical: sgp30: Handle IAQ thread creation failure kthread_run() can fail and return an error pointer, but sgp_probe() stores it and returns success, so the device is registered without its IAQ thread and sgp_remove() later passes the error pointer to kthread_stop(). Return the error from probe instead.
Quoted source text, attributed separately from HOL analysis.