CVE-2026-90335

tty: skip cdev_del() when no cdev is registered

State: Published
Severity: Not scored
Published: Sep 17, 2026
Updated: Oct 30, 2026
Reserved: Sep 11, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

tty: skip cdev_del() when no cdev is registered

TTY device registration can fail before a cdev is allocated. Serial core keeps the port so setserial can still use it, and later removal passes the NULL cdev slot to cdev_del(), causing a NULL-pointer dereference.

Only delete the cdev when the slot is not NULL.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before 6c92b8d9c23a92f85b20bee3578d0f19cd1b1a68Affected a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before ea3d2fae7c1d6492145976553817d22e8ef69a0eAffected a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before 21031bd0d662549412378110c989b164feb6e4beAffected a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before 2af4c46b429907edc8cb069c78fca1d950120b98Affected a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before 3dbf85ef40b6366ba15e882f7536cdc98bea579aAffected a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before c3b5623fd97648f2747444aa8932ae604662df93Affected
LinuxLinux	4.3Affected before 4.3Not affected 6.1.191 through 6.1.Not affected 6.6.160 through 6.6.Not affected 6.12.114 through 6.12.Not affected 6.18.57 through 6.18.Not affected 7.2.6 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before 6c92b8d9c23a92f85b20bee3578d0f19cd1b1a68Affected
a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before ea3d2fae7c1d6492145976553817d22e8ef69a0eAffected
a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before 21031bd0d662549412378110c989b164feb6e4beAffected
a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before 2af4c46b429907edc8cb069c78fca1d950120b98Affected
a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before 3dbf85ef40b6366ba15e882f7536cdc98bea579aAffected
a3a10ce3429e5dee623ad5c8407ea58e204fcb0a to before c3b5623fd97648f2747444aa8932ae604662df93Affected

LinuxLinux

4.3Affected
before 4.3Not affected
6.1.191 through 6.1.*Not affected
6.6.160 through 6.6.*Not affected
6.12.114 through 6.12.*Not affected
6.18.57 through 6.18.*Not affected
7.2.6 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.