In the Linux kernel, the following vulnerability has been resolved: net: cpsw_new: unregister devlink on port registration failure cpsw_probe()… (CVE-2026-98909)

The Linux kernel's cpsw_probe() function registers a devlink instance before registering CPSW ports. If cpsw_register_ports() fails, the error path only unregisters notifiers and releases lower-level resources but does not undo the successful devlink registration. This leaves the devlink instance and its parameters registered even though the probe failed. The fix adds a devlink cleanup label for the error path where devlink registration succeeded and uses it when port registration fails, ensuring proper cleanup.

The vulnerability could lead to stale or inconsistent devlink state remaining registered after a failed probe, which may affect system stability or resource management. There is no indication of direct exploitation or security compromise beyond resource mismanagement.

A fix has been applied to the Linux kernel to properly unregister devlink on port registration failure in cpsw_probe(). Users should update to the fixed kernel version when available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.