CVE-2026-100079

Analyzed Analyzed - Analysis Complete

USB TypeC UCSI Debugfs Entry Leak Fix

Publication date: 2026-09-25

Last updated on: 2026-10-02

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsi_register() creates per-instance debugfs entries, but ucsi_unregister() keeps them around until ucsi_destroy(). Drivers like ucsi_glink that unregister/register the same UCSI instance across remoteproc restart then try to create an already existing debugfs directory and log: debugfs: 'pmic_glink.ucsi.0' already exists in 'ucsi' Unregister debugfs entries as part of ucsi_unregister(), and clear ucsi->debugfs after freeing it so repeated unregister paths remain safe.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-02

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-100079

EUVD

EUVD-2026-87059

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	From 6.13 (inc) to 6.18.52 (exc)
linux	linux_kernel	From 6.19 (inc) to 7.2.6 (exc)
linux	linux_kernel	From 6.7 (inc) to 6.12.110 (exc)
linux	linux_kernel	From 6.6 (inc) to 6.6.157 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-772	The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves improper handling of debugfs entries in the USB Type-C UCSI (USB Type-C Connector System Software Interface) subsystem. When a UCSI instance is unregistered, its debugfs entries are not removed immediately, causing issues when the same instance is re-registered later, such as during remoteproc restart. This leads to error messages about duplicate debugfs directories.

Detection Guidance

This vulnerability is specific to the Linux kernel's USB Type-C subsystem and may manifest as debugfs directory creation errors during UCSI instance restart. Check kernel logs for messages like 'debugfs: already exists in ucsi' using commands such as dmesg | grep debugfs or journalctl -k | grep debugfs.

Impact Analysis

This vulnerability may cause system instability or error messages when USB Type-C devices are frequently reconnected or when the UCSI subsystem is restarted. It could lead to debugfs-related errors but does not directly affect core functionality or security.

Compliance Impact

This vulnerability does not directly affect compliance with standards like GDPR or HIPAA as it pertains to a debugfs entry management issue in the Linux kernel's USB Type-C subsystem. No data exposure or security impact is described.

Mitigation Strategies

Apply the latest Linux kernel updates that include the fix for this issue. If immediate patching is not possible, monitor for debugfs errors and avoid restarting UCSI instances repeatedly until the kernel is updated.

Hi! I’m here to help you understand CVE-2026-100079. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70