{"id":"CVE-2026-98909","kind":"vulnerability","aliases":["CVE-2026-98909"],"related":[],"title":"Linux kernel: CPSW probe failure leaves devlink registered, a resource leak","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nnet: cpsw_new: unregister devlink on port registration failure\n\ncpsw_probe() registers devlink before registering the CPSW ports.\n\nIf cpsw_register_ports() fails, the error path only unregisters the\nnotifiers and then releases the lower level resources. It does not undo\nthe successful cpsw_register_devlink() call, leaving the devlink instance\nand its parameters registered after probe has failed.\n\nAdd a devlink cleanup label for the path where devlink registration has\nalready succeeded, and use it when port registration fails.","summary":"When the TI CPSW network driver fails to register its ports during probe, the error path skips unregistering the devlink instance, leaving it registered after probe has failed. The sources describe a resource leak and do not describe any way for an attacker to gain access or run code.","severity":"unknown","cvss":null,"epss":0.00215,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["embedded","infrastructure","linux-kernel","ti-cpsw"],"not_affected_if":["driver-not-loaded"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-23T12:18:25+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","triaged_at":"2026-10-25T04:58:30+00:00","updated_at":"2026-10-25T12:38:50+00:00","category":"infrastructure","confidence":0.5,"triage":{"at":"2026-10-25T04:58:30Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"Linux kernel: CPSW probe failure leaves devlink registered, a resource leak","impact":"low","summary":"When the TI CPSW network driver fails to register its ports during probe, the error path skips unregistering the devlink instance, leaving it registered after probe has failed. The sources describe a resource leak and do not describe any way for an attacker to gain access or run code.","category":"infrastructure","nicknames":[],"who_cares":["linux-kernel","embedded","ti-cpsw"],"confidence":0.5,"needs_auth":"unknown","worst_case":"unknown; the sources describe only a leaked devlink registration after a failed probe","analyst_note":"","how_to_check":"unknown","needs_analyst":false,"not_affected_if":["driver-not-loaded"],"who_is_affected":"Systems running a Linux kernel with the TI CPSW (cpsw_new) Ethernet driver, typically embedded boards with TI SoCs, where probe can fail during port registration. The sources do not say whether a distribution kernel includes this fix yet. Systems without this driver can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000554,"input_tokens":3406,"output_tokens":426,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98909':14A,17A 'access':71B 'add':144C 'alreadi':156C 'attack':68B 'call':131C 'cleanup':147C 'code':74B 'cpsw':3A,25B,29B,86C,94C,101C,104C,128C 'cve':12A,15A 'describ':56B,63B 'devlink':7A,45B,89C,97C,130C,134C,146C,153C 'driver':31B 'embed':18B 'error':40B,109C 'fail':32B,53B,107C,143C,164C 'failur':5A,93C 'follow':80C 'gain':70B 'infrastructur':19B 'instanc':46B,135C 'kernel':2A,22B,78C 'label':148C 'leak':11A,59B 'leav':6A,47B,132C 'level':120C 'linux':1A,21B,77C 'linux-kernel':20B 'lower':119C 'net':85C 'network':30B 'new':87C 'notifi':114C 'paramet':138C 'path':41B,110C,151C 'port':36B,91C,102C,106C,162C 'probe':4A,38B,51B,95C,141C 'regist':8A,34B,49B,96C,99C,105C,129C,139C 'registr':92C,154C,163C 'releas':117C 'resolv':84C 'resourc':10A,58B,121C 'run':73B 'skip':42B 'sourc':55B 'succeed':157C 'success':127C 'ti':24B,28B 'ti-cpsw':23B 'undo':125C 'unregist':43B,88C,112C 'use':159C 'vulner':81C 'way':65B","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel with the TI CPSW (cpsw_new) Ethernet driver, typically embedded boards with TI SoCs, where probe can fail during port registration. The sources do not say whether a distribution kernel includes this fix yet. Systems without this driver can skip it.","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-23T12:18:25+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98909","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98909","severity":null,"published_at":"2026-10-23T12:18:25+00:00","modified_at":"2026-10-23T12:18:25+00:00","first_seen_at":"2026-10-23T21:57:33+00:00","fetched_at":"2026-10-23T22:29:03+00:00","note":null},{"source":"epss","external_id":"CVE-2026-98909","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-98909","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-25T12:38:50+00:00","fetched_at":"2026-10-25T12:38:50+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}