In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: host: Fix controller cleanup on EDL sysfs failure

mhi_register_controller() adds the controller device before creating the
optional trigger_edl sysfs file. If sysfs_create_file() fails, the error
path only drops the device reference and leaves the device registered.

Hence, call device_del() in the error path before put_device().

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Linux Linux unaffected
Version Status Constraints
17553ba8e19dee8770b3dcc597d49dcc3418f3b0 affected < 7943dc67250fad6ceac0dd089c6ad5776e4be71d
17553ba8e19dee8770b3dcc597d49dcc3418f3b0 affected < 4fb17a7c437f145353e93e6a9791f6db70e1cc63
17553ba8e19dee8770b3dcc597d49dcc3418f3b0 affected < 4743959aa8d876b5b456a62e8a62eb770db7afe9
17553ba8e19dee8770b3dcc597d49dcc3418f3b0 affected < 0d5b9e66591d4e2a4376ac82c8cda889a29ba3ee
Linux Linux affected
Version Status Constraints
6.10 affected —
0 unaffected < 6.10
6.12.110 unaffected ≤ 6.12.*
6.18.52 unaffected ≤ 6.18.*
7.2.6 unaffected ≤ 7.2.*
7.3-rc1 unaffected ≤ *

No data.

No data.

No data.

Project Subscriptions

Vendors Products
Linux Subscribe
Linux Kernel Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://git.kernel.org/stable/c/0d5b9e66591d4e2a4376ac82c8cda889a29ba3ee cve-icon
https://git.kernel.org/stable/c/4743959aa8d876b5b456a62e8a62eb770db7afe9 cve-icon
https://git.kernel.org/stable/c/4fb17a7c437f145353e93e6a9791f6db70e1cc63 cve-icon
https://git.kernel.org/stable/c/7943dc67250fad6ceac0dd089c6ad5776e4be71d cve-icon
History

Thu, 17 Sep 2026 16:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device().
Title bus: mhi: host: Fix controller cleanup on EDL sysfs failure
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-09-17T16:09:32.194Z

Reserved: 2026-09-11T19:38:34.811Z

Link: CVE-2026-90402

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses

No weakness.