Description
In the Linux kernel, the following vulnerability has been resolved:

usb: typec: ucsi: unregister debugfs entries on teardown

ucsi_register() creates per-instance debugfs entries, but
ucsi_unregister() keeps them around until ucsi_destroy().

Drivers like ucsi_glink that unregister/register the same UCSI
instance across remoteproc restart then try to create an already
existing debugfs directory and log:

debugfs: 'pmic_glink.ucsi.0' already exists in 'ucsi'

Unregister debugfs entries as part of ucsi_unregister(), and
clear ucsi->debugfs after freeing it so repeated unregister
paths remain safe.
Published: 2026-09-25
Score: 5.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Resource Leak due to lingering debugfs entries after UCSI teardown
Action: Patch Kernel
AI Analysis

Impact

The kernel failure causes UCSI instances to leave their per‑instance debugfs entries in place when ucsi_unregister() is called. The register routine creates new directories, but the unregister path does not remove them until ucsi_destroy() is invoked, resulting in duplicate directory attempts and kernel log messages stating "debugfs: '…' already exists".

Affected Systems

All Linux kernel builds released before the bug‑fix commit are affected. Any distribution that has not applied the corresponding kernel patch inherits the flaw. Drivers that register and unregister the same UCSI instance during remoteproc restarts, such as ucsi_glink, are likely to trigger the problem.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity, while the EPSS score of less than 1% and the absence from the CISA KEV catalog show that exploitation is highly unlikely. The issue manifests as a resource‑management problem that does not expose user data, compromise confidentiality or integrity, nor provide an attack vector.

Generated by OpenCVE AI on October 2, 2026 at 23:51 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the kernel to a version that contains the UCSI debugfs cleanup patch from the Linux kernel repository
  • If an upgrade is not immediately possible, configure affected drivers such as ucsi_glink to defer re‑initialization of UCSI instances until the patch is applied or disable remoteproc restarts that trigger re‑registration
  • Continuously audit kernel logs for repeated "debugfs: '…' already exists" messages and plan an update if the symptom persists

Generated by OpenCVE AI on October 2, 2026 at 23:51 UTC.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
Debian DLA Debian DLA DLA-4817-1 linux-6.12 security update
Debian DSA Debian DSA DSA-6528-1 linux security update
History

Fri, 02 Oct 2026 22:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-404

Fri, 02 Oct 2026 20:30:00 +0000

Type Values Removed Values Added
Weaknesses CWE-772

Thu, 01 Oct 2026 00:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-459
References
Metrics threat_severity

None

cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

threat_severity

Low


Fri, 25 Sep 2026 17:00:00 +0000

Type Values Removed Values Added
Weaknesses CWE-404

Fri, 25 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Description In the Linux kernel, the following vulnerability has been resolved: usb: typec: ucsi: unregister debugfs entries on teardown ucsi_register() creates per-instance debugfs entries, but ucsi_unregister() keeps them around until ucsi_destroy(). Drivers like ucsi_glink that unregister/register the same UCSI instance across remoteproc restart then try to create an already existing debugfs directory and log: debugfs: 'pmic_glink.ucsi.0' already exists in 'ucsi' Unregister debugfs entries as part of ucsi_unregister(), and clear ucsi->debugfs after freeing it so repeated unregister paths remain safe.
Title usb: typec: ucsi: unregister debugfs entries on teardown
First Time appeared Linux
Linux linux Kernel
CPEs cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
Vendors & Products Linux
Linux linux Kernel
References

Subscriptions

Linux Linux Kernel
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2026-10-19T08:43:11.422Z

Reserved: 2026-09-25T10:25:14.456Z

Link: CVE-2026-100079

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-09-25T14:17:15.000

Modified: 2026-10-19T09:17:06.757

Link: CVE-2026-100079

cve-icon Redhat

Severity : Low

Publid Date: 2026-09-25T00:00:00Z

Links: CVE-2026-100079 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-10-03T00:00:14Z

Weaknesses
  • CWE-459

    Incomplete Cleanup

  • CWE-772

    Missing Release of Resource after Effective Lifetime