CVE-2026-93225 Linux kernel phy: fsl-imx8mq-usb - Resource Leak

Linux kernel phy: fsl-imx8mq-usb contains a resource leak vulnerability caused by improper cleanup of typec switch on probe error path, letting the system leak resources, exploit requires probe failure after imx95_usb_phy_get_tca() succeeds.

CVSS base score 7.4 /10
High
CISA KEV
Not listed
Public exploit
None known
Authentication
Not required
EPSS
0.14% chance of exploitation in 30 days
View the NVD record ↗

Details

Type
Resource Leak
Impact
Denial Of Service
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Published
24 September 2026
Updated
15 October 2026

Vendor fix

Update to the latest Linux kernel version containing the fix for typec switch cleanup on probe error path.

Patching closes this CVE. It does not tell you which of your systems run the affected version, or what else is exposed alongside them.

References

← All CVEs