CVE-2026-90298 - Vulnerability Details

- drm/sun4i: tcon: Drop TCON TOP device reference

Description

In the Linux kernel, the following vulnerability has been resolved:

drm/sun4i: tcon: Drop TCON TOP device reference

of_find_device_by_node() takes a device reference. Drop it after mux
configuration succeeds.

Published: 2026-09-17

Score: n/a

EPSS: < 1% Very Low

KEV: No

Impact:

Action:

Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

Linux

unaffected

Version	Status	Constraints
`0305189afb323c1bad2be7fe713d556a9b708003`	affected	< 31b54c92a49a2b40fcd59b0c8cf346b0b3fb288b
`0305189afb323c1bad2be7fe713d556a9b708003`	affected	< 3eeb8545d5513defe935ce46a9824512f7a2bbd9
`0305189afb323c1bad2be7fe713d556a9b708003`	affected	< b192f08480d63d3f5e46d35c91d4fccd4e703ca7
`0305189afb323c1bad2be7fe713d556a9b708003`	affected	< 4fa22218c2351621d470d2d2ae4f6a2ac39ada94
`0305189afb323c1bad2be7fe713d556a9b708003`	affected	< e6406726ee7f4deb1b9b32c1ad6a147ffd208bec
`0305189afb323c1bad2be7fe713d556a9b708003`	affected	< 1ca06d47ac40bdcb63e4e528499bf531c6c3231b
`0305189afb323c1bad2be7fe713d556a9b708003`	affected	< ae08a67bca7817e37c16c1ec51bce7f2ff9aaf2c
`0305189afb323c1bad2be7fe713d556a9b708003`	affected	< 8208832a38ff3d2560eb8a77a9d7a2f17d8ebcdc

Linux

affected

Version	Status	Constraints
`4.20`	affected	—
`0`	unaffected	< 4.20
`5.10.270`	unaffected	≤ 5.10.*
`5.15.221`	unaffected	≤ 5.15.*
`6.1.188`	unaffected	≤ 6.1.*
`6.6.157`	unaffected	≤ 6.6.*
`6.12.110`	unaffected	≤ 6.12.*
`6.18.52`	unaffected	≤ 6.18.*
`7.2.6`	unaffected	≤ 7.2.*
`7.3-rc1`	unaffected	≤ *

No data.

Vendor Product Confidence Versions

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`[0305189afb323c1bad2be7fe713d556a9b708003,31b54c92a49a2b40fcd59b0c8cf346b0b3fb288b)`	affected	code_commit	—
`[0305189afb323c1bad2be7fe713d556a9b708003,3eeb8545d5513defe935ce46a9824512f7a2bbd9)`	affected	code_commit	—
`[0305189afb323c1bad2be7fe713d556a9b708003,b192f08480d63d3f5e46d35c91d4fccd4e703ca7)`	affected	code_commit	—
`[0305189afb323c1bad2be7fe713d556a9b708003,4fa22218c2351621d470d2d2ae4f6a2ac39ada94)`	affected	code_commit	—
`[0305189afb323c1bad2be7fe713d556a9b708003,e6406726ee7f4deb1b9b32c1ad6a147ffd208bec)`	affected	code_commit	—
`[0305189afb323c1bad2be7fe713d556a9b708003,1ca06d47ac40bdcb63e4e528499bf531c6c3231b)`	affected	code_commit	—
`[0305189afb323c1bad2be7fe713d556a9b708003,ae08a67bca7817e37c16c1ec51bce7f2ff9aaf2c)`	affected	code_commit	—
`[0305189afb323c1bad2be7fe713d556a9b708003,8208832a38ff3d2560eb8a77a9d7a2f17d8ebcdc)`	affected	code_commit	—

Linux

Linux Kernel

99%

Version	Status	Scheme	Platform
`4.20`	affected	generic	—
`[0,4.20)`	unaffected	generic	—
`[5.10.270,5.11.0)`	unaffected	semver	—
`[5.15.221,5.16.0)`	unaffected	semver	—
`[6.1.188,6.2.0)`	unaffected	semver	—
`[6.6.157,6.7.0)`	unaffected	semver	—
`[6.12.110,6.13.0)`	unaffected	semver	—
`[6.18.52,6.19.0)`	unaffected	semver	—
`[7.2.6,7.3.0)`	unaffected	semver	—
`[7.3-rc1,*]`	unaffected	semver	—

Found an issue or want to improve our Enrichment? You can suggest it directly by opening an issue on our dedicated GitHub repository .

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.0021.

Key SSVC decision points have not yet been added.

References

Link	Providers
https://git.kernel.org/stable/c/1ca06d47ac40bdcb63e4e528499bf531c6c3231b
https://git.kernel.org/stable/c/31b54c92a49a2b40fcd59b0c8cf346b0b3fb288b
https://git.kernel.org/stable/c/3eeb8545d5513defe935ce46a9824512f7a2bbd9
https://git.kernel.org/stable/c/4fa22218c2351621d470d2d2ae4f6a2ac39ada94
https://git.kernel.org/stable/c/8208832a38ff3d2560eb8a77a9d7a2f17d8ebcdc
https://git.kernel.org/stable/c/ae08a67bca7817e37c16c1ec51bce7f2ff9aaf2c
https://git.kernel.org/stable/c/b192f08480d63d3f5e46d35c91d4fccd4e703ca7
https://git.kernel.org/stable/c/e6406726ee7f4deb1b9b32c1ad6a147ffd208bec

History

Sun, 20 Sep 2026 01:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-401 CWE-773

Thu, 17 Sep 2026 16:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: tcon: Drop TCON TOP device reference of_find_device_by_node() takes a device reference. Drop it after mux configuration succeeds.
Title		drm/sun4i: tcon: Drop TCON TOP device reference
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/1ca06d47ac40bdcb63e4e528499bf531c6c3231b https://git.kernel.org/stable/c/31b54c92a49a2b40fcd59b0c8cf346b0b3fb288b https://git.kernel.org/stable/c/3eeb8545d5513defe935ce46a9824512f7a2bbd9 https://git.kernel.org/stable/c/4fa22218c2351621d470d2d2ae4f6a2ac39ada94 https://git.kernel.org/stable/c/8208832a38ff3d2560eb8a77a9d7a2f17d8ebcdc https://git.kernel.org/stable/c/ae08a67bca7817e37c16c1ec51bce7f2ff9aaf2c https://git.kernel.org/stable/c/b192f08480d63d3f5e46d35c91d4fccd4e703ca7 https://git.kernel.org/stable/c/e6406726ee7f4deb1b9b32c1ad6a147ffd208bec

Subscriptions

Linux Linux Kernel

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-09-17T16:08:23.249Z

Updated: 2026-09-17T16:08:23.249Z

Reserved: 2026-09-11T19:38:34.799Z

Link: CVE-2026-90298

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-09-17T17:17:27.277

Modified: 2026-09-17T17:17:27.277

Link: CVE-2026-90298

Redhat

No data.

OpenCVE Enrichment

Updated: 2026-09-20T01:00:13Z

Weaknesses

CWE-401
Missing Release of Memory after Effective Lifetime
CWE-773
Missing Reference to Active File Descriptor or Handle

Tracking

Subscriptions

JSON object

JSON object

JSON object

JSON object

JSON object