CVE-2026-90056

Description

In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fec_ptp_init() is only called when fep->bufdesc_ex is available. However, fec_probe() unconditionally calls fec_ptp_stop() on the failed_init path, and fec_drv_remove() unconditionally calls fec_ptp_stop() during device removal. Check fep->bufdesc_ex before calling fec_ptp_stop() in both paths to avoid stopping PTP when it was not initialized.

Is your site exposed to CVE-2026-90056?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0021

Probability of exploitation

0.11%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/0602a4c238d2b6ed6e2bf5fa8ef7fa0203883dac https://git.kernel.org/stable/c/0dc8b3a395c3a749ab62c078f2fd54a402ae7e2b https://git.kernel.org/stable/c/1973f108c481fab9bdc7daa6c77442af4a7388ab https://git.kernel.org/stable/c/1f9639caeece703012bdb23975ebedf70f426269 https://git.kernel.org/stable/c/383f699a86fd04458dc47d10578c17e94f63d92f https://git.kernel.org/stable/c/5975009651c4e5ec1492612962d0dd3dc86f6bda https://git.kernel.org/stable/c/7566789664813c1778f0d4b7e0539fd863ea450c https://git.kernel.org/stable/c/dd890ae29299636fb037276fc1b5238698d08b03

Frequently Asked Questions

What is CVE-2026-90056? +

In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fec_ptp_init() is only called when fep->bufdesc_ex is available. However, fec_probe() unconditionally calls fec_ptp_stop() on the failed_init path, and fec_drv_remove() unconditionally calls fec_ptp_stop() during device removal. Check fep->bufdesc_ex before calling fec_ptp_stop() in both paths to avoid stopping PTP when it was not initialized.

How do I check if I'm vulnerable to CVE-2026-90056? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.