Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | CVE-2026-98909 |
In the Linux kernel, the following vulnerability has been resolved:
net: cpsw_new: unregister devlink on port registration failure
cpsw_probe() registers devlink before...
Linux, TILinux, Linux kernel, TI cpsw_new
|
NVD | |||
|
CVE-2026-98909In the Linux kernel, the following vulnerability has been resolved:
net: cpsw_new: unregister devlink on port registration failure
cpsw_probe() registers devlink before...
Executive summaryThis advisory describes a resource cleanup bug in the Linux kernel network driver for the TI CPSW Ethernet switch (cpsw_new). When driver probe fails during port registration, a devlink instance was left registered, which the advisory describes as a fix in the stable kernel tree. The advisory does not state a severity rating, and it does not describe any exploitation or required fix action beyond applying the patched kernel. Technical summaryThe flaw is a resource leak in the error path of cpsw_probe() in drivers/net/ethernet/ti/cpsw_new.c. If cpsw_register_ports() fails after cpsw_register_devlink() succeeded, the devlink instance and its parameters remained registered after probe failed. The patch adds a clean_unregister_devlink label that calls cpsw_unregister_devlink() before the existing notifier cleanup. The advisory does not state an attack vector, privileges required, or any impact beyond the leak. Affected and fixed kernel version numbers are not stated in the advisory, and no workaround or detection guidance is given. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. Summarized from git.kernel.org/stable/c/0a44945b0d3422f…49c97e293f3e21a8c585 ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||