CVE-2026-98909

net: cpsw_new: unregister devlink on port registration failure

State: Published
Severity: Not scored
Published: Oct 23, 2026
Updated: Oct 26, 2026
Reserved: Sep 25, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

net: cpsw_new: unregister devlink on port registration failure

cpsw_probe() registers devlink before registering the CPSW ports.

If cpsw_register_ports() fails, the error path only unregisters the notifiers and then releases the lower level resources. It does not undo the successful cpsw_register_devlink() call, leaving the devlink instance and its parameters registered after probe has failed.

Add a devlink cleanup label for the path where devlink registration has already succeeded, and use it when port registration fails.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	ed3525eda4c4983fb8509e488de0a351788041ba to before b020390b4ef39adc40c800301042baf812280da1Affected ed3525eda4c4983fb8509e488de0a351788041ba to before 5a5ac0defdd42e566f1c871272370b6a3a8eef5cAffected ed3525eda4c4983fb8509e488de0a351788041ba to before 43d4af5c5331ea739a49cb1097d41e502ed91ec4Affected ed3525eda4c4983fb8509e488de0a351788041ba to before 8af61d5bd87fd1a3bdc81fe948e7acdc8aa5bcf0Affected ed3525eda4c4983fb8509e488de0a351788041ba to before 2bcf21ede6b097ca96cb1f7679761acca6510555Affected ed3525eda4c4983fb8509e488de0a351788041ba to before 0a44945b0d3422f5d81b49c97e293f3e21a8c585Affected ed3525eda4c4983fb8509e488de0a351788041ba to before b64f763b607426ac97e44b114f0b8844ac3b86ddAffected
LinuxLinux	5.5Affected before 5.5Not affected 5.10.271 through 5.10.Not affected 5.15.222 through 5.15.Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

ed3525eda4c4983fb8509e488de0a351788041ba to before b020390b4ef39adc40c800301042baf812280da1Affected
ed3525eda4c4983fb8509e488de0a351788041ba to before 5a5ac0defdd42e566f1c871272370b6a3a8eef5cAffected
ed3525eda4c4983fb8509e488de0a351788041ba to before 43d4af5c5331ea739a49cb1097d41e502ed91ec4Affected
ed3525eda4c4983fb8509e488de0a351788041ba to before 8af61d5bd87fd1a3bdc81fe948e7acdc8aa5bcf0Affected
ed3525eda4c4983fb8509e488de0a351788041ba to before 2bcf21ede6b097ca96cb1f7679761acca6510555Affected
ed3525eda4c4983fb8509e488de0a351788041ba to before 0a44945b0d3422f5d81b49c97e293f3e21a8c585Affected
ed3525eda4c4983fb8509e488de0a351788041ba to before b64f763b607426ac97e44b114f0b8844ac3b86ddAffected

LinuxLinux

5.5Affected
before 5.5Not affected
5.10.271 through 5.10.*Not affected
5.15.222 through 5.15.*Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.