---
id: "CVE-2026-98909"
kind: "vulnerability"
aliases: ["CVE-2026-98909"]
title: "Linux kernel: CPSW probe failure leaves devlink registered, a resource leak"
severity: "unknown"
cvss: null
epss: 0.00215
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["embedded", "infrastructure", "linux-kernel", "ti-cpsw"]
not_affected_if: ["driver-not-loaded"]
published_at: "2026-10-23T12:18:25+00:00"
first_seen_at: "2026-10-23T21:57:33+00:00"
updated_at: "2026-10-25T12:38:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-98909", "first_seen_at": "2026-10-23T21:57:33+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-98909", "first_seen_at": "2026-10-25T12:38:50+00:00"}]
---

# Linux kernel: CPSW probe failure leaves devlink registered, a resource leak

When the TI CPSW network driver fails to register its ports during probe, the error path skips unregistering the devlink instance, leaving it registered after probe has failed. The sources describe a resource leak and do not describe any way for an attacker to gain access or run code.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-23T21:57:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-98909
- 2026-10-25T12:38:50+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-98909

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

net: cpsw_new: unregister devlink on port registration failure

cpsw_probe() registers devlink before registering the CPSW ports.

If cpsw_register_ports() fails, the error path only unregisters the
notifiers and then releases the lower level resources. It does not undo
the successful cpsw_register_devlink() call, leaving the devlink instance
and its parameters registered after probe has failed.

Add a devlink cleanup label for the path where devlink registration has
already succeeded, and use it when port registration fails.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_