CVE-2026-90056
net: fec: only stop PTP if it was initialized
Description
In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fec_ptp_init() is only called when fep->bufdesc_ex is available. However, fec_probe() unconditionally calls fec_ptp_stop() on the failed_init path, and fec_drv_remove() unconditionally calls fec_ptp_stop() during device removal. Check fep->bufdesc_ex before calling fec_ptp_stop() in both paths to avoid stopping PTP when it was not initialized.
INFO
Published Date :
Sept. 17, 2026, 5:16 p.m.
Last Modified :
Sept. 17, 2026, 5:16 p.m.
Remotely Exploit :
No
Source :
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Solution
- Apply the Linux kernel patch.
- Update the Linux kernel.
- Verify PTP initialization status before stopping.
References to Advisories, Solutions, and Tools
Here, you will find a curated list of external links that provide in-depth
information, practical solutions, and valuable tools related to
CVE-2026-90056.
CWE - Common Weakness Enumeration
While CVE identifies
specific instances of vulnerabilities, CWE categorizes the common flaws or
weaknesses that can lead to vulnerabilities. CVE-2026-90056 is
associated with the following CWEs:
Common Attack Pattern Enumeration and Classification (CAPEC)
Common Attack Pattern Enumeration and Classification
(CAPEC)
stores attack patterns, which are descriptions of the common attributes and
approaches employed by adversaries to exploit the CVE-2026-90056
weaknesses.
We scan GitHub repositories to detect new proof-of-concept exploits. Following list is a collection of public exploits and proof-of-concepts, which have been published on GitHub (sorted by the most recently updated).
Results are limited to the first 15 repositories due to potential performance issues.
The following list is the news that have been mention
CVE-2026-90056 vulnerability anywhere in the article.
The following table lists the changes that have been made to the
CVE-2026-90056 vulnerability over time.
Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability's severity, exploitability, or other characteristics.
-
New CVE Received by 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Sep. 17, 2026
Action Type Old Value New Value Added Description In the Linux kernel, the following vulnerability has been resolved: net: fec: only stop PTP if it was initialized fec_ptp_init() is only called when fep->bufdesc_ex is available. However, fec_probe() unconditionally calls fec_ptp_stop() on the failed_init path, and fec_drv_remove() unconditionally calls fec_ptp_stop() during device removal. Check fep->bufdesc_ex before calling fec_ptp_stop() in both paths to avoid stopping PTP when it was not initialized. Added Affected New affected value received. <a href="https://github.com/CVEProject/cvelistV5/blob/main/cves/2026/90xxx/CVE-2026-90056.json">CVE-2026-90056</a> Added Reference https://git.kernel.org/stable/c/0602a4c238d2b6ed6e2bf5fa8ef7fa0203883dac Added Reference https://git.kernel.org/stable/c/0dc8b3a395c3a749ab62c078f2fd54a402ae7e2b Added Reference https://git.kernel.org/stable/c/1973f108c481fab9bdc7daa6c77442af4a7388ab Added Reference https://git.kernel.org/stable/c/1f9639caeece703012bdb23975ebedf70f426269 Added Reference https://git.kernel.org/stable/c/383f699a86fd04458dc47d10578c17e94f63d92f Added Reference https://git.kernel.org/stable/c/5975009651c4e5ec1492612962d0dd3dc86f6bda Added Reference https://git.kernel.org/stable/c/7566789664813c1778f0d4b7e0539fd863ea450c Added Reference https://git.kernel.org/stable/c/dd890ae29299636fb037276fc1b5238698d08b03