phy: fsl-imx8mq-usb: fix typec switch leak on probe error path (CVE-2026-93225) | HOL Guard CVE

High · CVSS 7.4CVE-2026-93225

phy: fsl-imx8mq-usb: fix typec switch leak on probe error path

Answer in brief

CVE-2026-93225 records a High severity (CVSS 7.4) vulnerability in phy: fsl-imx8mq-usb: fix typec switch leak on probe error path. The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 24, 2026Updated Sep 25, 2026Source checked Sep 25, 2026First seen by HOL Sep 25, 2026Material review Sep 25, 2026

Upstream Advisory

Key facts

Risk: High · CVSS 7.4
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

CVSS is 7.4. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=b58f0f86fd6156d7b084257f5c91ceaf7d760927 <f1b7b2c7ffa9711d1298f52790b377fe02efc1db \|\| >=b58f0f86fd6156d7b084257f5c91ceaf7d760927 <84646f5b945a370f6999eed59a334387b0abc282 \|\| >=b58f0f86fd6156d7b084257f5c91ceaf7d760927 <87a1805b1c346b092c34f96f3806f207792910e1	f1b7b2c7ffa9711d1298f52790b377fe02efc1db, 84646f5b945a370f6999eed59a334387b0abc282, 87a1805b1c346b092c34f96f3806f207792910e1
Linux/Linuxgeneric	6.15	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to f1b7b2c7ffa9711d1298f52790b377fe02efc1db if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 24, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 25, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 25, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: phy: fsl-imx8mq-usb: fix typec switch leak on probe error path If probe fails after imx95_usb_phy_get_tca() succeeds, the typec switch leaks because the only cleanup path was in .remove(), which never runs on probe failure. Use devm_add_action_or_reset() so the switch is cleaned up on both probe failure and driver removal. The imx95_usb_phy_put_tca() is no longer needed, it will be removed in .remove() too.

Quoted source text, attributed separately from HOL analysis.