-

CVE-2026-90335

tty: skip cdev_del() when no cdev is registered

In the Linux kernel, the following vulnerability has been resolved:

tty: skip cdev_del() when no cdev is registered

TTY device registration can fail before a cdev is allocated.
Serial core keeps the port so setserial can still use it, and later
removal passes the NULL cdev slot to cdev_del(), causing a NULL-pointer
dereference.

Only delete the cdev when the slot is not NULL.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version a3a10ce3429e5dee623ad5c8407ea58e204fcb0a
Version < 3dbf85ef40b6366ba15e882f7536cdc98bea579a
Status affected
Version a3a10ce3429e5dee623ad5c8407ea58e204fcb0a
Version < c3b5623fd97648f2747444aa8932ae604662df93
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 4.3
Status affected
Version 0
Version < 4.3
Status unaffected
Version <= 7.2.*
Version 7.2.6
Status unaffected
Version <= *
Version 7.3-rc1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.16% 0.051
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/3dbf85ef40b6366ba15e882f7536cdc98bea579a
https://git.kernel.org/stable/c/c3b5623fd97648f2747444aa8932ae604662df93