rapidio: clear mport->net when rio_add_net() fails

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-90319
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-17 17:17:29 UTC
Updated2026-09-17 17:17:29 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: rapidio: clear mport->net when rio_add_net() fails rio_alloc_net() stores the newly allocated rio_net in mport->net before rio_scan_alloc_net() registers the device. If rio_add_net() fails, rio_scan_alloc_net() drops the device reference with put_device(), which releases the rio_net through the device release callback. However, mport->net is left pointing at the freed object. A later mport unregister path can then dereference the dangling mport->net pointer and may try to free the same rio_net again. Clear mport->net in the rio_add_net() failure path, matching the cleanup done for the destID table allocation failure path.

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 4f3509cfcc02e9d757f2714bb7dbbeec35de6fa7 24f60ebabeb8757cec8ec2f97660d521bc9147ec git Not specified
CNA Linux Linux affected 181d4daaefb3bceeb2f2635ba9f3781eeda9e550 6a760a53e73064735cdfa9e51c664983a89baf96 git Not specified
CNA Linux Linux affected ad82be4298a89a9ae46f07128bdf3d8614bce745 3f00999e44d9984036a029dbad9d2afe94a674d0 git Not specified
CNA Linux Linux affected e6411c3b9512dba09af7d014d474516828c89706 332591a245de978349a7558f8b20469951bb77cc git Not specified
CNA Linux Linux affected c332f3e2df0fcae5a45fd55cc18902fb1e4825ca 75f0bc167b96bbbef8182b88308c732af82c8d83 git Not specified
CNA Linux Linux affected e842f9a1edf306bf36fe2a4d847a0b0d458770de 44a37264b26911e13d0a4f5630751c4157ed0354 git Not specified
CNA Linux Linux affected e842f9a1edf306bf36fe2a4d847a0b0d458770de 530a9d5ef831a0049dad9a6b2b92d02301352c38 git Not specified
CNA Linux Linux affected e842f9a1edf306bf36fe2a4d847a0b0d458770de b74030fbf187b43c1f85b66a7082e9946511cb5d git Not specified
CNA Linux Linux affected 6d22953c4a183d0b7fdf34d68c5debd16da6edc5 git Not specified
CNA Linux Linux affected a0d069ccc475abaaa79c6368ee27fc0b5912bea8 git Not specified
CNA Linux Linux affected 5.10.235 5.10.270 semver Not specified
CNA Linux Linux affected 5.15.179 5.15.221 semver Not specified
CNA Linux Linux affected 6.1.131 6.1.188 semver Not specified
CNA Linux Linux affected 6.6.83 6.6.157 semver Not specified
CNA Linux Linux affected 6.12.19 6.12.110 semver Not specified
CNA Linux Linux affected 5.4.291 5.5 semver Not specified
CNA Linux Linux affected 6.13.7 6.14 semver Not specified
CNA Linux Linux affected 6.14 Not specified
CNA Linux Linux unaffected 6.14 semver Not specified
CNA Linux Linux unaffected 5.10.270 5.10.* semver Not specified
CNA Linux Linux unaffected 5.15.221 5.15.* semver Not specified
CNA Linux Linux unaffected 6.1.188 6.1.* semver Not specified
CNA Linux Linux unaffected 6.6.157 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.110 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.52 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3-rc1 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/b74030fbf187b43c1f85b66a7082e9946511cb5d 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/3f00999e44d9984036a029dbad9d2afe94a674d0 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/75f0bc167b96bbbef8182b88308c732af82c8d83 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/332591a245de978349a7558f8b20469951bb77cc 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/24f60ebabeb8757cec8ec2f97660d521bc9147ec 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/6a760a53e73064735cdfa9e51c664983a89baf96 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/44a37264b26911e13d0a4f5630751c4157ed0354 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/530a9d5ef831a0049dad9a6b2b92d02301352c38 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report