Cette page suit l'état du correctif pour Debian. La vulnérabilité elle-même est décrite sur la page CVE principale. Voir CVE-2026-90335 →

DEBIAN-CVE-2026-90335

In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TTY device registration can fail...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

In the Linux kernel, the following vulnerability has been resolved: tty: skip cdev_del() when no cdev is registered TTY device registration can fail before a cdev is allocated. Serial core keeps the port so setserial can still use it, and later removal passes the NULL cdev slot to cdev_del(), causing a NULL-pointer dereference. Only delete the cdev when the slot is not NULL.

Source: OSV.dev (Open Source Vulnerabilities) OSV

Paquets affectés

Debian:12 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:13 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}]

Debian:14 linux

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.2.6-1"}]}]

Références

advisory security-tracker.debian.org