OCTOBER 12, 2026
Live Feed
Back to database
Case File

CVE-2026-90288

HIGH · CVSS 7.4 EPSS 0.15%

Source: NVD + CISA KEV + EPSS · Published 2026-09-17 · Last synced 2026-10-12

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's handling of device node references during the creation of PHY devices in the Renesas R-Car Gen2 platform. An improper reference counting could lead to a potential memory management issue, which may cause instability or crashes in systems utilizing this hardware. Developers and system administrators working with affected Linux kernel versions on Renesas R-Car Gen2 platforms should prioritize applying the fix to ensure system reliability.

CVE
CVE-2026-90288
Severity
HIGH
CVSS
7.4
EPSS
0.15%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure for_each_child_of_node_scoped() releases the node reference on scope exit, so the explicit of_node_put(np) in the devm_phy_create() error path drops it twice. Drop the redundant of_node_put() and let the scoped cleanup handle it.