{"id":"CVE-2026-93225","title":"In the Linux kernel, the following vulnerability has been resolved:\n\nphy: fsl-imx8mq-usb: fix typec switch leak on probe error path\n\nIf probe fails after imx95_usb_phy_get_tca() succeeds, the typec\nswitch leaks because the only cleanup p…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nphy: fsl-imx8mq-usb: fix typec switch leak on probe error path\n\nIf probe fails after imx95_usb_phy_get_tca() succeeds, the typec\nswitch leaks because the only cleanup p…","severity":"high","cvss":7.4,"cvssVector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","vendor":"Linux","product":"Linux","affected":["Linux >= b58f0f86fd6156d7b084257f5c91ceaf7d760927 < f1b7b2c7ffa9711d1298f52790b377fe02efc1db","Linux >= b58f0f86fd6156d7b084257f5c91ceaf7d760927 < 84646f5b945a370f6999eed59a334387b0abc282","Linux >= b58f0f86fd6156d7b084257f5c91ceaf7d760927 < 87a1805b1c346b092c34f96f3806f207792910e1","Linux 6.15"],"published":"2026-09-24","updated":"2026-09-25","sourceUpdated":"2026-09-25T05:17:00.443","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-93225","references":[{"url":"https://git.kernel.org/stable/c/84646f5b945a370f6999eed59a334387b0abc282","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/87a1805b1c346b092c34f96f3806f207792910e1","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/f1b7b2c7ffa9711d1298f52790b377fe02efc1db","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-24T15:45:56.665Z","slug":"CVE-2026-93225","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nphy: fsl-imx8mq-usb: fix typec switch leak on probe error path\n\nIf probe fails after imx95_usb_phy_get_tca() succeeds, the typec\nswitch leaks because the only cleanup path was in .remove(), which\nnever runs on probe failure.\n\nUse devm_add_action_or_reset() so the switch is cleaned up on both\nprobe failure and driver removal. The imx95_usb_phy_put_tca() is no\nlonger needed, it will be removed in .remove() too.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":41,"depthScoreParts":{"impact":40.7,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[{"seq":210511,"id":"CVE-2026-93225","ts":1790316054471,"field":"cvss","old":null,"new":"7.4"},{"seq":210510,"id":"CVE-2026-93225","ts":1790316054471,"field":"severity","old":"none","new":"high"}]}