CVE-2026-90287: phy: sunplus: fix error handling in sp_uphy_init()
In the Linux kernel, the following vulnerability has been resolved:
phy: sunplus: fix error handling in spuphyinit()
Fix the error paths of spuphyinit() to undo exactly what each stage did: return directly if clkprepareenable() fails, release only the clock if resetcontroldeassert() fails, and jump to errreset if updatediscvol() fails so the clock and reset are not leaked.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.1.190-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.113-1~deb12u1 - Upgrade
Upgrade
ubuntu/linux-hwe-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42~24.04.1 - Upgrade
Upgrade
ubuntu/linux-riscv-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1~24.04.1 - Upgrade
Upgrade
ubuntu/linuxto a version that resolves this vulnerability.Fixed in 7.0.0-42.42 - Upgrade
Upgrade
ubuntu/linux-awsto a version that resolves this vulnerability.Fixed in 7.0.0-1016.17 - Upgrade
Upgrade
ubuntu/linux-gcpto a version that resolves this vulnerability.Fixed in 7.0.0-1016.18 - Upgrade
Upgrade
ubuntu/linux-ibmto a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oem-7.0to a version that resolves this vulnerability.Fixed in 7.0.0-1017.17 - Upgrade
Upgrade
ubuntu/linux-oracleto a version that resolves this vulnerability.Fixed in 7.0.0-1015.16 - Upgrade
Upgrade
ubuntu/linux-riscvto a version that resolves this vulnerability.Fixed in 7.0.0-42.42.1
Event History
Frequently Asked Questions
What conditions are required for this issue to occur?
The issue occurs when sp_uphy_init() encounters failures in clk_prepare_enable(), reset_control_deassert(), or update_disc_vol(). The vulnerable error paths can leave clock and reset resources in an incorrect state.
Which systems are potentially affected?
Systems running a Linux kernel that uses the Sunplus PHY driver and reaches the affected sp_uphy_init() error paths may be affected. The provided information does not identify specific kernel versions or Sunplus hardware models.
What is the practical impact of the flawed error handling?
Failed initialization may leak enabled clock and reset state because cleanup does not match the initialization stage that failed. This can leave hardware resources improperly configured after an initialization error.