CVE-2026-90287

Description

In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in sp_uphy_init() Fix the error paths of sp_uphy_init() to undo exactly what each stage did: return directly if clk_prepare_enable() fails, release only the clock if reset_control_deassert() fails, and jump to err_reset if update_disc_vol() fails so the clock and reset are not leaked.

Is your site exposed to CVE-2026-90287?

Run a free security scan — no signup, results in seconds.

EPSS — Exploit Prediction

0.0022

Probability of exploitation

0.11%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/1489b694b1f3265cd5363100642a22190033f4b0 https://git.kernel.org/stable/c/1fce81a40e3b3ec6b4f52e278d5c2bde79b25939 https://git.kernel.org/stable/c/3a7dcbe3112aef3505beae4f982331a00326217c https://git.kernel.org/stable/c/5acdc4d5b58bd0730824938db79b5f08ef996d9c https://git.kernel.org/stable/c/8b2683bc4cc18c581b7cd24f227cbe61abca7f4d https://git.kernel.org/stable/c/d8856bfe6d00c21c4c0ba689cb6c9e30ceaccb8f

Frequently Asked Questions

What is CVE-2026-90287? +

In the Linux kernel, the following vulnerability has been resolved: phy: sunplus: fix error handling in sp_uphy_init() Fix the error paths of sp_uphy_init() to undo exactly what each stage did: return directly if clk_prepare_enable() fails, release only the clock if reset_control_deassert() fails, and jump to err_reset if update_disc_vol() fails so the clock and reset are not leaked.

How do I check if I'm vulnerable to CVE-2026-90287? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.