CVE-2026-90335

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-90335
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90335.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90335
Downstream
AZL (1)
BELL (1)
CLSA (6)
DEBIAN (1)
openSUSE (1)
UBUNTU (1)
Related
Published
2026-09-17T16:08:48Z
Modified
2026-10-28T02:31:03Z
Summary
tty: skip cdev_del() when no cdev is registered
Details

In the Linux kernel, the following vulnerability has been resolved:

tty: skip cdev_del() when no cdev is registered

TTY device registration can fail before a cdev is allocated. Serial core keeps the port so setserial can still use it, and later removal passes the NULL cdev slot to cdev_del(), causing a NULL-pointer dereference.

Only delete the cdev when the slot is not NULL.

Database specific 
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90335.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
a3a10ce3429e5dee623ad5c8407ea58e204fcb0a
Fixed
ea3d2fae7c1d6492145976553817d22e8ef69a0e
Fixed
21031bd0d662549412378110c989b164feb6e4be
Fixed
2af4c46b429907edc8cb069c78fca1d950120b98
Fixed
3dbf85ef40b6366ba15e882f7536cdc98bea579a
Fixed
c3b5623fd97648f2747444aa8932ae604662df93

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90335.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
4.3.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.57
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.6

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90335.json"