Skip to main content
← All vulnerabilities
CVE-2026-90287

phy: sunplus: fix error handling in sp_uphy_init()

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.1.188, 6.6.157, 6.12.110, 6.18.52, 7.2.6
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in sp_uphy_init() Fix the error paths of sp_uphy_init() to undo exactly what each stage did: return directly if clk_prepare_enable() fails, release only the clock if reset_control_deassert() fails, and jump to err_reset if update_disc_vol() fails so the clock and reset are not leaked.

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 99d9ccd97385208b78b3d88e756451f4b70119fc · fixed in d8856bfe6d00c21c4c0ba689cb6c9e30ceaccb8f; From 99d9ccd97385208b78b3d88e756451f4b70119fc · fixed in 1fce81a40e3b3ec6b4f52e278d5c2bde79b25939; From 99d9ccd97385208b78b3d88e756451f4b70119fc · fixed in 3a7dcbe3112aef3505beae4f982331a00326217c; From 99d9ccd97385208b78b3d88e756451f4b70119fc · fixed in 1489b694b1f3265cd5363100642a22190033f4b0; From 99d9ccd97385208b78b3d88e756451f4b70119fc · fixed in 5acdc4d5b58bd0730824938db79b5f08ef996d9c; From 99d9ccd97385208b78b3d88e756451f4b70119fc · fixed in 8b2683bc4cc18c581b7cd24f227cbe61abca7f4d

  • Linux Linux

    6.1

  • KernelLinux

    From 6.1.0 · fixed in 6.1.188; From 6.2.0 · fixed in 6.6.157; From 6.7.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.6

References 6

git.kernel.org