Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-90402 Details

Description

In the Linux kernel, the following vulnerability has been resolved: bus: mhi: host: Fix controller cleanup on EDL sysfs failure mhi_register_controller() adds the controller device before creating the optional trigger_edl sysfs file. If sysfs_create_file() fails, the error path only drops the device reference and leaves the device registered. Hence, call device_del() in the error path before put_device().

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:7 HIGHVector:CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/0d5b9e66591d4e2a4376ac82c8cda889a29ba3ee kernel.org
https://git.kernel.org/stable/c/4743959aa8d876b5b456a62e8a62eb770db7afe9 kernel.org
https://git.kernel.org/stable/c/4fb17a7c437f145353e93e6a9791f6db70e1cc63 kernel.org
https://git.kernel.org/stable/c/7943dc67250fad6ceac0dd089c6ad5776e4be71d kernel.org

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-90402
NVD Published Date:
Sep 17, 2026
NVD Last Modified:
Sep 18, 2026
Source:
kernel.org
CVE-2026-90402 Details - Not Deferred