Live › vulnerability › CVE-2026-98909
Go to dashboardWhen the TI CPSW network driver fails to register its ports during probe, the error path skips unregistering the devlink instance, leaving it registered after probe has failed. The sources describe a resource leak and do not describe any way for an attacker to gain access or run code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the TI CPSW (cpsw_new) Ethernet driver, typically embedded boards with TI SoCs, where probe can fail during port registration. The sources do not say whether a distribution kernel includes this fix yet. Systems without this driver can skip it.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
net: cpsw_new: unregister devlink on port registration failure
cpsw_probe() registers devlink before registering the CPSW ports.
If cpsw_register_ports() fails, the error path only unregisters the notifiers and then releases the lower level resources. It does not undo the successful cpsw_register_devlink() call, leaving the devlink instance and its parameters registered after probe has failed.
Add a devlink cleanup label for the path where devlink registration has already succeeded, and use it when port registration fails.
This page as .md · .json · in your agent: get_signal("CVE-2026-98909")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.