CVE-2026-90288 PUBLISHED

phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure

Assigner: Linux
Reserved: 11.09.2026 Published: 17.09.2026 Updated: 17.09.2026

In the Linux kernel, the following vulnerability has been resolved:

phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure

for_each_child_of_node_scoped() releases the node reference on scope exit, so the explicit of_node_put(np) in the devm_phy_create() error path drops it twice.

Drop the redundant of_node_put() and let the scoped cleanup handle it.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from b64b32791fb557f922beebddf74c47baf338cef0 to 5374f3d53376d35085e0727c8c1b945bf7123996 (excl.)
  • affected from b64b32791fb557f922beebddf74c47baf338cef0 to b780b8929c759cfa7a892d58625a5ad46cb1cbd2 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.0 is affected
  • unaffected from 0 to 7.0 (excl.)
  • unaffected from 7.2.6 to 7.2.* (incl.)
  • unaffected from 7.3-rc1 to * (incl.)

References