Linux Kernel Vulnerability in CPSW Port Registration Process

CVE-2026-98909

What is CVE-2026-98909?

In the Linux kernel, a flaw in the CPSW port registration process allows a devlink instance to remain registered even after a failure in port registration occurs. The cpsw_probe() function registers the devlink before the CPSW ports, which can lead to resource mismanagement and stability issues if port registration fails. To address this, a new cleanup pathway has been implemented to ensure that the devlink instance is properly unregistered in the event of registration failure, preventing orphaned instances and potential resource leaks.

References