CVE-2026-90056

net: fec: only stop PTP if it was initialized

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

net: fec: only stop PTP if it was initialized

fec_ptp_init() is only called when fep->bufdesc_ex is available. However, fec_probe() unconditionally calls fec_ptp_stop() on the failed_init path, and fec_drv_remove() unconditionally calls fec_ptp_stop() during device removal.

Check fep->bufdesc_ex before calling fec_ptp_stop() in both paths to avoid stopping PTP when it was not initialized.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 32cba57ba74be58589aeb4cb6496183e46a5e3e5 to before 0dc8b3a395c3a749ab62c078f2fd54a402ae7e2bAffected
  • 32cba57ba74be58589aeb4cb6496183e46a5e3e5 to before 1973f108c481fab9bdc7daa6c77442af4a7388abAffected
  • 32cba57ba74be58589aeb4cb6496183e46a5e3e5 to before 0602a4c238d2b6ed6e2bf5fa8ef7fa0203883dacAffected
  • 32cba57ba74be58589aeb4cb6496183e46a5e3e5 to before 7566789664813c1778f0d4b7e0539fd863ea450cAffected
  • 32cba57ba74be58589aeb4cb6496183e46a5e3e5 to before 383f699a86fd04458dc47d10578c17e94f63d92fAffected
  • 32cba57ba74be58589aeb4cb6496183e46a5e3e5 to before 1f9639caeece703012bdb23975ebedf70f426269Affected
  • 32cba57ba74be58589aeb4cb6496183e46a5e3e5 to before 5975009651c4e5ec1492612962d0dd3dc86f6bdaAffected
  • 32cba57ba74be58589aeb4cb6496183e46a5e3e5 to before dd890ae29299636fb037276fc1b5238698d08b03Affected
  • 9561b28349a22c808c3ce25eaed4d132104bafb7Affected
  • 3.18.99 to before 3.19Affected
LinuxLinux
  • 4.2Affected
  • before 4.2Not affected
  • 5.10.270 through 5.10.*Not affected
  • 5.15.221 through 5.15.*Not affected
  • 6.1.188 through 6.1.*Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.