Skip to main content
← All vulnerabilities
CVE-2026-90402

bus: mhi: host: Fix controller cleanup on EDL sysfs failure

Published
Last modified
published
Not listed in CISA KEV
Fix
Fixed in 6.12.110, 6.18.52, 7.2.6
None on Exploit-DB, Metasploit or GitHub

Summary

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device().

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Linux Linux

    From 17553ba8e19dee8770b3dcc597d49dcc3418f3b0 · fixed in 7943dc67250fad6ceac0dd089c6ad5776e4be71d; From 17553ba8e19dee8770b3dcc597d49dcc3418f3b0 · fixed in 4fb17a7c437f145353e93e6a9791f6db70e1cc63; From 17553ba8e19dee8770b3dcc597d49dcc3418f3b0 · fixed in 4743959aa8d876b5b456a62e8a62eb770db7afe9; From 17553ba8e19dee8770b3dcc597d49dcc3418f3b0 · fixed in 0d5b9e66591d4e2a4376ac82c8cda889a29ba3ee

  • Linux Linux

    6.10

  • KernelLinux

    From 6.10.0 · fixed in 6.12.110; From 6.13.0 · fixed in 6.18.52; From 6.19.0 · fixed in 7.2.6

References 4

git.kernel.org