CVE-2026-90402: bus: mhi: host: Fix controller cleanup on EDL sysfs failure
In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: host: Fix controller cleanup on EDL sysfs failure
mhiregistercontroller() adds the controller device before creating the optional triggeredl sysfs file. If sysfscreatefile() fails, the error path only drops the device reference and leaves the device registered.
Hence, call devicedel() in the error path before putdevice().
Event History
Frequently Asked Questions
Under what condition does the faulty cleanup path run?
It runs when creation of the optional trigger_edl sysfs file fails during mhi_register_controller(). The controller device has already been added at that point.
What is the result of the failed cleanup?
The error path drops the device reference but does not unregister the already-added controller device, leaving it registered.
What change addresses the issue?
The fix calls device_del() in the sysfs-file-creation failure path before put_device(), so the controller device is unregistered during cleanup.