VulnerabilityPublished 23 Oct 2026

CVE-2026-98909: Linux kernel · net: cpsw_new: unregister devlink on port registration failure

Source GCVE Database

Authoritative record:CVE-2026-98909· Low

Not known to be exploited · fixed in b020390b4ef39adc40c800301042baf812280da1 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 14:05 UTC

Severity

Low

Rated by Threat Radar · CVSS not yet scored by NVD

EPSS: 0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch: Available – fixed in b020390b4ef39adc40c800301042baf812280da1, b64f763b607426ac97e44b114f0b8844ac3b86dd, 43d4af5c5331ea739a49cb1097d41e502ed91ec4 +4

Exploitation evidence

Disclosed: evidence found.
CVE published 23 Oct 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

Disclosed: The CVE record is public on cve.org. Its publication is t = 0.
Detectable: A public nuclei template can find exposed instances, for defenders and attackers alike.
Weaponised: Public exploit code exists in Metasploit or Exploit-DB, or CISA SSVC or the CVSS exploit maturity reports a public proof of concept.
Exploited in the wild: CISA KEV lists it, CISA SSVC rates exploitation active, or a source reports attacks.
Observed by OffSeq Mirage: OffSeq Mirage honeypot sensors recorded attack traffic for this CVE, or found exposed hosts without attack traffic.

Moments are spaced evenly, not to scale; a dashed line marks a gap of six months or more. Deltas count from t = 0. Sources that give only a date (CISA KEV, Exploit-DB, or a time of exactly 00:00Z) read “same day” rather than hours. Metasploit modules carry the flaw’s disclosure date, not their release date, and nuclei templates carry no date, so both appear above but not on the timeline.

ghsa-7h76-g88g-x9j7

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

Product	Affected	Fixed in
LinuxLinux	Affected ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < b020390b4ef39adc40c800301042baf812280da1	Fixed in b020390b4ef39adc40c800301042baf812280da1
LinuxLinux	Affected ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < b64f763b607426ac97e44b114f0b8844ac3b86dd	Fixed in b64f763b607426ac97e44b114f0b8844ac3b86dd
LinuxLinux	Affected ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 43d4af5c5331ea739a49cb1097d41e502ed91ec4	Fixed in 43d4af5c5331ea739a49cb1097d41e502ed91ec4
LinuxLinux	Affected ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 8af61d5bd87fd1a3bdc81fe948e7acdc8aa5bcf0	Fixed in 8af61d5bd87fd1a3bdc81fe948e7acdc8aa5bcf0
LinuxLinux	Affected ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 5a5ac0defdd42e566f1c871272370b6a3a8eef5c	Fixed in 5a5ac0defdd42e566f1c871272370b6a3a8eef5c
LinuxLinux	Affected ≥ ed3525eda4c4983fb8509e488de0a351788041ba, < 2bcf21ede6b097ca96cb1f7679761acca6510555	Fixed in 2bcf21ede6b097ca96cb1f7679761acca6510555

AI-suggested

A fix has been applied to the Linux kernel to properly unregister devlink on port registration failure in cpsw_probe(). Users should update to the fixed kernel version when available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.

Description

A vulnerability in the Linux kernel's CPSW driver was resolved where the devlink instance remained registered if port registration failed during probe. This occurred because the error handling path did not unregister the devlink after a failed cpsw_register_ports() call, potentially leaving stale devlink state.

Impact

The vulnerability could lead to stale or inconsistent devlink state remaining registered after a failed probe, which may affect system stability or resource management. There is no indication of direct exploitation or security compromise beyond resource mismanagement.

Summary

The Linux kernel's cpsw_probe() function registers a devlink instance before registering CPSW ports. If cpsw_register_ports() fails, the error path only unregisters notifiers and releases lower-level resources but does not undo the successful devlink registration. This leaves the devlink instance and its parameters registered even though the probe failed. The fix adds a devlink cleanup label for the error path where devlink registration succeeded and uses it when port registration fails, ensuring proper cleanup.

References

Community reviews

Loading reviews…