CVE-2026-100079
Received Received - Intake

USB TypeC UCSI Debugfs Entry Leak Fix

Vulnerability report for CVE-2026-100079, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-25

Last updated on: 2026-09-25

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsi_register() creates per-instance debugfs entries, but ucsi_unregister() keeps them around until ucsi_destroy(). Drivers like ucsi_glink that unregister/register the same UCSI instance across remoteproc restart then try to create an already existing debugfs directory and log: debugfs: 'pmic_glink.ucsi.0' already exists in 'ucsi' Unregister debugfs entries as part of ucsi_unregister(), and clear ucsi->debugfs after freeing it so repeated unregister paths remain safe.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-25
Last Modified
2026-09-25
Generated
2026-09-25
AI Q&A
2026-09-25
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves improper handling of debugfs entries in the USB Type-C UCSI (USB Type-C Connector System Software Interface) subsystem. When a UCSI instance is unregistered, its debugfs entries are not removed immediately, causing issues when the same instance is re-registered later, such as during remoteproc restart. This leads to error messages about duplicate debugfs directories.

Detection Guidance

This vulnerability is specific to the Linux kernel's USB Type-C subsystem and may manifest as debugfs directory creation errors during UCSI instance restart. Check kernel logs for messages like 'debugfs: already exists in ucsi' using commands such as dmesg | grep debugfs or journalctl -k | grep debugfs.

Impact Analysis

This vulnerability may cause system instability or error messages when USB Type-C devices are frequently reconnected or when the UCSI subsystem is restarted. It could lead to debugfs-related errors but does not directly affect core functionality or security.

Mitigation Strategies

Apply the latest Linux kernel updates that include the fix for this issue. If immediate patching is not possible, monitor for debugfs errors and avoid restarting UCSI instances repeatedly until the kernel is updated.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-100079. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart