CVE-2026-90335

Published: Set 17, 2026 Last Modified: Set 17, 2026
ExploitDB:
Other exploit source:
Google Dorks:

Description

AI Translation Available

In the Linux kernel, the following vulnerability has been resolved:

tty: skip cdev_del() when no cdev is registered

TTY device registration can fail before a cdev is allocated.
Serial core keeps the port so setserial can still use it, and later
removal passes the NULL cdev slot to cdev_del(), causing a NULL-pointer
dereference.

Only delete the cdev when the slot is not NULL.

https://git.kernel.org/stable/c/3dbf85ef40b6366ba15e882f7536cdc98bea579a
https://git.kernel.org/stable/c/c3b5623fd97648f2747444aa8932ae604662df93