CVE-2026-89744

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

device property: fix infinite loop in fwnode_for_each_child_node()

When iterate over children of a fwnode that has a secondary fwnode,

fwnode_get_next_child_node() can enter an infinite loop if the secondary

fwnode has more than one child.

Parent Child

(Primary fwnode) FWa: {FWa1, FWa2, FWa3}

(Secondary fwnode) FWb: {FWb1, FWb2}

In this case:

┌─> fwnode_get_next_child_node(FWa, FWa1)

│ - fwnode_call_ptr_op(FWa, get_next_child_node, FWa1) returns FWa2

│

│ ...

│

│ fwnode_get_next_child_node(FWa, FWa3)

│ - fwnode_call_ptr_op(FWa, get_next_child_node, FWa3) returns NULL

│ - fwnode_call_ptr_op(FWb, get_next_child_node, FWa3) returns FWb1

│

│ fwnode_get_next_child_node(FWa, FWb1)

│ - fwnode_call_ptr_op(FWa, get_next_child_node, FWb1) returns FWa1

└────┘

This cause fwnode_for_each_child_node() to loop indefinitely, reapeatedly

output {FWa1, FW

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References