CVE-2026-93225EPSS p3.1%
CVE-2026-93225CVE-2026-93225
Description
In the Linux kernel, the following vulnerability has been resolved:
phy: fsl-imx8mq-usb: fix typec switch leak on probe error path
If probe fails after imx95_usb_phy_get_tca() succeeds, the typec
switch leaks because the only cleanup path was in .remove(), which
never runs on probe failure.
Use devm_add_action_or_reset() so the switch is cleaned up on both
probe failure and driver removal. The imx95_usb_phy_put_tca() is no
longer needed, it will be removed in .remove() too.
Scoring
| CVSS | 7.4 () |
| Vector | CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
| EPSS | 0.14% probability of exploitation · percentile 3.1% · 2026-10-05T12:00:23Z |
| Last modified | 2026-09-25 |