Riskcovery

CVE-2026-90215

mtd: ubi: Release device reference on busy detach

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 11, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

mtd: ubi: Release device reference on busy detach

ubi_detach_mtd_dev() obtains a device reference through ubi_get_device() before checking whether the UBI device is busy. The busy return path drops ubi->ref_count but leaves the device reference held, so the device object cannot be released after a later detach.

Drop the device reference before returning -EBUSY.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 7e84c961b2eb062d2f47037dcca52dcd1d3615b5 to before 87812858c4c8df979cb70bcd0040b925a543df6fAffected
  • 7e84c961b2eb062d2f47037dcca52dcd1d3615b5 to before e065960366b55ab21e6c643c30dec2a41451900bAffected
  • 7e84c961b2eb062d2f47037dcca52dcd1d3615b5 to before 851c5e9a829d56cb0982965f07ef8966a6722884Affected
  • 7e84c961b2eb062d2f47037dcca52dcd1d3615b5 to before 31dd710cd84d5dd63c49f640d3a9f36c9699ca95Affected
LinuxLinux
  • 6.9Affected
  • before 6.9Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.