---
id: CVE-2026-98909
title: 'net: cpsw_new: unregister devlink on port registration failure'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  net: cpsw_new: unregister devlink on port registration failure

  cpsw_probe() registers devlink before registering the CPSW ports.

  If cpsw_register_ports() fails, the e…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    b020390b4ef39adc40c800301042baf812280da1
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    5a5ac0defdd42e566f1c871272370b6a3a8eef5c
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    43d4af5c5331ea739a49cb1097d41e502ed91ec4
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    8af61d5bd87fd1a3bdc81fe948e7acdc8aa5bcf0
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    2bcf21ede6b097ca96cb1f7679761acca6510555
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    0a44945b0d3422f5d81b49c97e293f3e21a8c585
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    b64f763b607426ac97e44b114f0b8844ac3b86dd
  - Linux < 5.10.271
  - Linux < 5.15.222
  - Linux < 6.1.189
  - Linux < 6.6.158
  - Linux < 6.12.111
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-10-23'
updated: '2026-10-23'
sourceUpdated: '2026-10-23T11:54:47.326Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-98909'
references:
  - url: 'https://git.kernel.org/stable/c/b020390b4ef39adc40c800301042baf812280da1'
  - url: 'https://git.kernel.org/stable/c/5a5ac0defdd42e566f1c871272370b6a3a8eef5c'
  - url: 'https://git.kernel.org/stable/c/43d4af5c5331ea739a49cb1097d41e502ed91ec4'
  - url: 'https://git.kernel.org/stable/c/8af61d5bd87fd1a3bdc81fe948e7acdc8aa5bcf0'
  - url: 'https://git.kernel.org/stable/c/2bcf21ede6b097ca96cb1f7679761acca6510555'
  - url: 'https://git.kernel.org/stable/c/0a44945b0d3422f5d81b49c97e293f3e21a8c585'
  - url: 'https://git.kernel.org/stable/c/b64f763b607426ac97e44b114f0b8844ac3b86dd'
tags:
  - cve.org
ingestedAt: '2026-10-23T13:24:55.573Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

net: cpsw_new: unregister devlink on port registration failure

cpsw_probe() registers devlink before registering the CPSW ports.

If cpsw_register_ports() fails, the error path only unregisters the
notifiers and then releases the lower level resources. It does not undo
the successful cpsw_register_devlink() call, leaving the devlink instance
and its parameters registered after probe has failed.

Add a devlink cleanup label for the path where devlink registration has
already succeeded, and use it when port registration fails.

## Affected

- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b020390b4ef39adc40c800301042baf812280da1`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 5a5ac0defdd42e566f1c871272370b6a3a8eef5c`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 43d4af5c5331ea739a49cb1097d41e502ed91ec4`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 8af61d5bd87fd1a3bdc81fe948e7acdc8aa5bcf0`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 2bcf21ede6b097ca96cb1f7679761acca6510555`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < 0a44945b0d3422f5d81b49c97e293f3e21a8c585`
- `Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 < b64f763b607426ac97e44b114f0b8844ac3b86dd`
- `Linux < 5.10.271`
- `Linux < 5.15.222`
- `Linux < 6.1.189`
- `Linux < 6.6.158`
- `Linux < 6.12.111`
- `Linux < 6.18.53`
- `Linux (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.