What’s Vulnerable › Vulnerabilities

CVE-2026-90298: drm/sun4i: tcon: Drop TCON TOP device reference

• Severity: unknown
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-09-17 · updated 2026-10-19

Description

In the Linux kernel, the following vulnerability has been resolved: drm/sun4i: tcon: Drop TCON TOP device reference of_find_device_by_node() takes a device reference. Drop it after mux configuration succeeds.

Affected products

• Linux kernel: 4.20 — fixed in 7.3

How to fix

Upgrade to a fixed version: Linux kernel 7.3. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/1ca06d47ac40bdcb63e4e528499bf531c6c3231b
• https://git.kernel.org/stable/c/31b54c92a49a2b40fcd59b0c8cf346b0b3fb288b
• https://git.kernel.org/stable/c/3eeb8545d5513defe935ce46a9824512f7a2bbd9
• https://git.kernel.org/stable/c/4fa22218c2351621d470d2d2ae4f6a2ac39ada94
• https://git.kernel.org/stable/c/8208832a38ff3d2560eb8a77a9d7a2f17d8ebcdc
• https://git.kernel.org/stable/c/ae08a67bca7817e37c16c1ec51bce7f2ff9aaf2c
• https://git.kernel.org/stable/c/b192f08480d63d3f5e46d35c91d4fccd4e703ca7
• https://git.kernel.org/stable/c/e6406726ee7f4deb1b9b32c1ad6a147ffd208bec

Get alerted when CVE-2026-90298 or the next vulnerability affects your stack