Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2026-90402

Опубликовано: 17 сент. 2026
Источник: debian
EPSS Низкий

Описание

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device().

Пакеты

ПакетСтатусВерсия исправленияРелизТип
linuxfixed7.2.6-1package
linuxnot-affectedbookwormpackage

Примечания

  • https://git.kernel.org/linus/0d5b9e66591d4e2a4376ac82c8cda889a29ba3ee (7.3-rc1)

EPSS

Процентиль: 2%
0.00121
Низкий

Связанные уязвимости

CVSS3: 7
ubuntu
3 дня назад

(In the Linux kernel, the following vulnerability has been resolved: b ...)

CVSS3: 7
nvd
4 дня назад

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device().

CVSS3: 7
github
4 дня назад

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device().

EPSS

Процентиль: 2%
0.00121
Низкий