---
id: CVE-2026-90298
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/sun4i: tcon: Drop TCON TOP device reference

  of_find_device_by_node() takes a device reference
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  drm/sun4i: tcon: Drop TCON TOP device reference

  of_find_device_by_node() takes a device reference. Drop it after mux
  configuration succeeds.
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 0305189afb323c1bad2be7fe713d556a9b708003 <
    31b54c92a49a2b40fcd59b0c8cf346b0b3fb288b
  - >-
    Linux >= 0305189afb323c1bad2be7fe713d556a9b708003 <
    3eeb8545d5513defe935ce46a9824512f7a2bbd9
  - >-
    Linux >= 0305189afb323c1bad2be7fe713d556a9b708003 <
    b192f08480d63d3f5e46d35c91d4fccd4e703ca7
  - >-
    Linux >= 0305189afb323c1bad2be7fe713d556a9b708003 <
    4fa22218c2351621d470d2d2ae4f6a2ac39ada94
  - >-
    Linux >= 0305189afb323c1bad2be7fe713d556a9b708003 <
    e6406726ee7f4deb1b9b32c1ad6a147ffd208bec
  - >-
    Linux >= 0305189afb323c1bad2be7fe713d556a9b708003 <
    1ca06d47ac40bdcb63e4e528499bf531c6c3231b
  - >-
    Linux >= 0305189afb323c1bad2be7fe713d556a9b708003 <
    ae08a67bca7817e37c16c1ec51bce7f2ff9aaf2c
  - >-
    Linux >= 0305189afb323c1bad2be7fe713d556a9b708003 <
    8208832a38ff3d2560eb8a77a9d7a2f17d8ebcdc
  - Linux 4.20
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:27.277'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-90298'
references:
  - url: 'https://git.kernel.org/stable/c/1ca06d47ac40bdcb63e4e528499bf531c6c3231b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/31b54c92a49a2b40fcd59b0c8cf346b0b3fb288b'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/3eeb8545d5513defe935ce46a9824512f7a2bbd9'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/4fa22218c2351621d470d2d2ae4f6a2ac39ada94'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/8208832a38ff3d2560eb8a77a9d7a2f17d8ebcdc'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/ae08a67bca7817e37c16c1ec51bce7f2ff9aaf2c'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b192f08480d63d3f5e46d35c91d4fccd4e703ca7'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/e6406726ee7f4deb1b9b32c1ad6a147ffd208bec'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.830Z'
epss: 0.0021
epssPercentile: 0.10072
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

drm/sun4i: tcon: Drop TCON TOP device reference

of_find_device_by_node() takes a device reference. Drop it after mux
configuration succeeds.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.