CVE-2026-93225

CVE-2026-93225

High · published September 24, 2026

CVSS v3.1
7.4
EPSS
0%
Percentile
3.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

phy: fsl-imx8mq-usb: fix typec switch leak on probe error path

If probe fails after imx95_usb_phy_get_tca() succeeds, the typec

switch leaks because the only cleanup path was in .remove(), which

never runs on probe failure.

Use devm_add_action_or_reset() so the switch is cleaned up on both

probe failure and driver removal. The imx95_usb_phy_put_tca() is no

longer needed, it will be removed in .remove() too.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00144 · 3.3th percentile
Published
2026-09-24T20:17Z
References (3)
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 15:21Z
    phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
    cvelistv5