CVE-2026-90287
Published Sep 17, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in sp_uphy_init() Fix the error paths of sp_uphy_init() to undo exactly what each stage did: return directly if clk_prepare_enable() fails, release only the clock if reset_control_deassert() fails, and jump to err_reset if update_disc_vol() fails so the clock and reset are not leaked.
Is your site exposed to CVE-2026-90287?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/1489b694b1f3265cd5363100642a22190033f4b0
https://git.kernel.org/stable/c/1fce81a40e3b3ec6b4f52e278d5c2bde79b25939
https://git.kernel.org/stable/c/3a7dcbe3112aef3505beae4f982331a00326217c
https://git.kernel.org/stable/c/5acdc4d5b58bd0730824938db79b5f08ef996d9c
https://git.kernel.org/stable/c/8b2683bc4cc18c581b7cd24f227cbe61abca7f4d
https://git.kernel.org/stable/c/d8856bfe6d00c21c4c0ba689cb6c9e30ceaccb8f
Frequently Asked Questions
What is CVE-2026-90287? +
In the Linux kernel, the following vulnerability has been resolved:
phy: sunplus: fix error handling in sp_uphy_init()
Fix the error paths of sp_uphy_init() to undo exactly what each stage
did: return directly if clk_prepare_enable() fails, release only the clock
if reset_control_deassert() fails, and jump to err_reset if
update_disc_vol() fails so the clock and reset are not leaked.
How do I check if I'm vulnerable to CVE-2026-90287? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.