CVE-2026-90219

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4: Free debugfs on registration failure c4iw_alloc() creates the per-device debugfs tree (dev->debugfs_root via setup_debugfs()), but it is removed only in c4iw_remove(), not in c4iw_dealloc(). When RDMA device registration fails, the registration worker's err_dealloc_ctx path calls c4iw_dealloc() directly, bypassing c4iw_remove(), so the debugfs dentries leak and outlive the freed c4iw_dev. Move debugfs_remove_recursive() into c4iw_dealloc() so every path that frees ctx->dev also removes its debugfs tree.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linux459b59f7ed56511d6529311cb4e5e482ebfcfb8e, cd60992f09b7e83bfd3c76e3bb06b29f3e2fa0a8, c332d9e7dce234d8bef78271d003a68ee943b61b, f98e894ec029a752cf9c7f7834741bead0fb463d, 479a7f90060e62bdd9bb4036ec0a70bf460f6d23, 046425412529dbfca1433c8bef5641b271b4ab2a, ea41b5630fa3d9877ce9ed8832cf5575f742bfbb, fe5c16bb6252dea6025b748257ddc3b2665495b0, 4.20, 5.5, 5.8 or later

Affected products

ProductAffected versionsFixed in
Linux Linux49ea0c036ede81f126f1a9389d377999fdf5c5a1 ≤ v < 459b59f7ed56511d6529311cb4e5e482ebfcfb8e, 49ea0c036ede81f126f1a9389d377999fdf5c5a1 ≤ v < cd60992f09b7e83bfd3c76e3bb06b29f3e2fa0a8, 49ea0c036ede81f126f1a9389d377999fdf5c5a1 ≤ v < c332d9e7dce234d8bef78271d003a68ee943b61b, 49ea0c036ede81f126f1a9389d377999fdf5c5a1 ≤ v < f98e894ec029a752cf9c7f7834741bead0fb463d, 49ea0c036ede81f126f1a9389d377999fdf5c5a1 ≤ v < 479a7f90060e62bdd9bb4036ec0a70bf460f6d23, 49ea0c036ede81f126f1a9389d377999fdf5c5a1 ≤ v < 046425412529dbfca1433c8bef5641b271b4ab2a, 49ea0c036ede81f126f1a9389d377999fdf5c5a1 ≤ v < ea41b5630fa3d9877ce9ed8832cf5575f742bfbb, 49ea0c036ede81f126f1a9389d377999fdf5c5a1 ≤ v < fe5c16bb6252dea6025b748257ddc3b2665495b0, 98fa991017981b52dcc4dc3924fc8e1e83e41bf4, af92e4a595e006b498c44b617ea38f697eca3469, 9c0cec79e5c914662c2cf98b4a729c0fcc8c872e, 4.19.130 ≤ v < 4.20, 5.4.49 ≤ v < 5.5, 5.7.6 ≤ v < 5.8, 5.8459b59f7ed56511d6529311cb4e5e482ebfcfb8e, cd60992f09b7e83bfd3c76e3bb06b29f3e2fa0a8, c332d9e7dce234d8bef78271d003a68ee943b61b, f98e894ec029a752cf9c7f7834741bead0fb463d, 479a7f90060e62bdd9bb4036ec0a70bf460f6d23, 046425412529dbfca1433c8bef5641b271b4ab2a, ea41b5630fa3d9877ce9ed8832cf5575f742bfbb, fe5c16bb6252dea6025b748257ddc3b2665495b0, 4.20, 5.5, 5.8

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.