Medium 5.5Published Sep 25, 2026

CVE-2026-100079usb: typec: ucsi: unregister debugfs entries on teardown

Updated under an hour ago (Oct 28, 2026, 8:23 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsi_register() creates per-instance debugfs entries, but ucsi_unregister() keeps them around until ucsi_destroy(). Drivers like ucsi_glink that unregister/register the same UCSI instance across remoteproc restart then try to create an already existing debugfs directory and log: debugfs: 'pmic_glink.ucsi.0' already exists in 'ucsi' Unregister debugfs entries as part of ucsi_unregister(), and clear ucsi->debugfs after freeing it so repeated unregister paths remain safe.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from df0383ffad64dc09954a60873c1e202b47f08d90 before fb7393519908befdc094be4ea913f582adbf2f7c; from df0383ffad64dc09954a60873c1e202b47f08d90 before 7177c215e69658adbd2f2fc5b72e14be9208d2ba; from df0383ffad64dc09954a60873c1e202b47f08d90 before 1f44d001620fd3caa30619a9bc73e9d15555408b; from df0383ffad64dc09954a60873c1e202b47f08d90 before 62efee351566321ad72a4abaf6eb7d972590585d; from df0383ffad64dc09954a60873c1e202b47f08d90 before eed73a65ab609b79d53de88cccc34b36dfe753c4	CNA record
linux linux_kernel linux:linux_kernel	from 6.6 before 6.6.157; from 6.7 before 6.12.110; from 6.13 before 6.18.52; from 6.19 before 7.2.6	NVD

References

References

https://git.kernel.org/stable/c/fb7393519908befdc094be4ea913f582adbf2f7c	patch
https://git.kernel.org/stable/c/7177c215e69658adbd2f2fc5b72e14be9208d2ba	patch
https://git.kernel.org/stable/c/1f44d001620fd3caa30619a9bc73e9d15555408b	patch
https://git.kernel.org/stable/c/62efee351566321ad72a4abaf6eb7d972590585d	patch
https://git.kernel.org/stable/c/eed73a65ab609b79d53de88cccc34b36dfe753c4	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.