---
id: CVE-2026-90335
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  tty: skip cdev_del() when no cdev is registered

  TTY device registration can fail before a cdev is allocated.
  Serial core keeps the port so setserial can still use it, …
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  tty: skip cdev_del() when no cdev is registered

  TTY device registration can fail before a cdev is allocated.
  Serial core keeps the port so setserial can still use it, …
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= a3a10ce3429e5dee623ad5c8407ea58e204fcb0a <
    3dbf85ef40b6366ba15e882f7536cdc98bea579a
  - >-
    Linux >= a3a10ce3429e5dee623ad5c8407ea58e204fcb0a <
    c3b5623fd97648f2747444aa8932ae604662df93
  - Linux 4.3
published: '2026-09-17'
updated: '2026-09-17'
sourceUpdated: '2026-09-17T17:17:32.073'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-90335'
references:
  - url: 'https://git.kernel.org/stable/c/3dbf85ef40b6366ba15e882f7536cdc98bea579a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c3b5623fd97648f2747444aa8932ae604662df93'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-17T16:21:47.819Z'
epss: 0.00155
epssPercentile: 0.0507
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

tty: skip cdev_del() when no cdev is registered

TTY device registration can fail before a cdev is allocated.
Serial core keeps the port so setserial can still use it, and later
removal passes the NULL cdev slot to cdev_del(), causing a NULL-pointer
dereference.

Only delete the cdev when the slot is not NULL.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.