Unrated severityNVD Advisory· Published Sep 17, 2026· Updated Oct 19, 2026
CVE-2026-90215
CVE-2026-90215
Description
In the Linux kernel, the following vulnerability has been resolved:
mtd: ubi: Release device reference on busy detach
ubi_detach_mtd_dev() obtains a device reference through ubi_get_device() before checking whether the UBI device is busy. The busy return path drops ubi->ref_count but leaves the device reference held, so the device object cannot be released after a later detach.
Drop the device reference before returning -EBUSY.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- osv-coords2 versions
>= 6.9.0, < 6.12.110+ 1 more
- (no CPE)range: >= 6.9.0, < 6.12.110
- (no CPE)range: < 7.2.7-1.1
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.