Riskcovery

CVE-2026-93136

bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation

State
Published
Severity
Not scored
Published
Sep 17, 2026
Updated
Oct 19, 2026
Reserved
Sep 17, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

bus: mhi: ep: Fix device refcount leak in the error path of MHI device creation

mhi_ep_create_device() takes one device reference for the UL channel and another for the DL channel after allocating the transfer device. These references are normally released by mhi_ep_destroy_device() before the device itself is removed.

If dev_set_name() or device_add() fails, the error path currently drops only one reference. The remaining channel references keep the device from being released and leave the channels associated with a device that was never registered.

Route both failures through a common unwind path that drops the DL channel reference, the UL channel reference, and the initial reference from device_initialize().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 297c77a0f27312b9a04696018c4cbd47926ca92b to before 8acc3813ab5015af73eeb74c9032443162f122d1Affected
  • 297c77a0f27312b9a04696018c4cbd47926ca92b to before 51ddb831a36102fd0ea25f354935e49abce9f0a1Affected
  • 297c77a0f27312b9a04696018c4cbd47926ca92b to before 4fae8fd4adc7f4765463ddeb1a5fad23936432f6Affected
  • 297c77a0f27312b9a04696018c4cbd47926ca92b to before 5587e7871ce994bb079f97fe7e430d99627e5292Affected
  • 297c77a0f27312b9a04696018c4cbd47926ca92b to before 8f3f64faee335eb678fd7dca7b95dfe3d0b271fdAffected
  • 297c77a0f27312b9a04696018c4cbd47926ca92b to before 6f12862600bb70e599a614d706a095ea5f8f9858Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.188 through 6.1.*Not affected
  • 6.6.157 through 6.6.*Not affected
  • 6.12.110 through 6.12.*Not affected
  • 6.18.52 through 6.18.*Not affected
  • 7.2.6 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.