CVE-2026-90056

CVE-2026-90056

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
10.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: fec: only stop PTP if it was initialized

fec_ptp_init() is only called when fep->bufdesc_ex is available.

However, fec_probe() unconditionally calls fec_ptp_stop() on the

failed_init path, and fec_drv_remove() unconditionally calls

fec_ptp_stop() during device removal.

Check fep->bufdesc_ex before calling fec_ptp_stop() in both paths

to avoid stopping PTP when it was not initialized.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00211 · 10.7th percentile
Published
2026-09-17T21:16Z
References (8)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:05Z
    net: fec: only stop PTP if it was initialized
    cvelistv5