SB2026092822 - Improper resource shutdown or release in Linux kernel typec ucsi driver

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026092822

SB2026092822 - Improper resource shutdown or release in Linux kernel typec ucsi driver

Published: September 28, 2026 Updated: September 30, 2026

Security Bulletin ID SB2026092822
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Partial DoS

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper resource shutdown or release (CVE-ID: CVE-2026-100079)

CWE-ID: CWE-404 - Improper Resource Shutdown or Release

CVSSv4: 4.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N]


The vulnerability allows a local user to prevent UCSI debugfs entries from being created.

The vulnerability exists due to improper resource cleanup in UCSI debugfs entry teardown when unregistering and registering the same UCSI instance across a remoteproc restart. A local user can trigger repeated UCSI instance unregistration and registration to prevent UCSI debugfs entries from being created.


Remediation

Install update from vendor's website.

References