Strix
64.4K

CVE-2026-90402

HIGHCVSS 7/10

Last modified

CVE-2026-90402 is a high-severity vulnerability rated 7/10 on the CVSS scale. In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device()..

Description

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device().

Metrics

CVSS 3.1
7/10

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 17553ba8e19dee8770b3dcc597d49dcc3418f3b0, < 7943dc67250fad6ceac0dd089c6ad5776e4be71d; >= 17553ba8e19dee8770b3dcc597d49dcc3418f3b0, < 4fb17a7c437f145353e93e6a9791f6db70e1cc63; >= 17553ba8e19dee8770b3dcc597d49dcc3418f3b0, < 4743959aa8d876b5b456a62e8a62eb770db7afe9; >= 17553ba8e19dee8770b3dcc597d49dcc3418f3b0, < 0d5b9e66591d4e2a4376ac82c8cda889a29ba3ee
LinuxLinux6.10

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-90402?
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device().
How severe is CVE-2026-90402?
CVE-2026-90402 has a CVSS score of 7/10 (HIGH severity).
How do I fix CVE-2026-90402?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-90402?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST