CVE-2026-98411

Updated on 14 Oct 2026

Severity

4.1 Medium severity

Details

CVSS score
4.1

Overview

About vulnerability

In the Linux kernel, the following vulnerability has been resolved:

power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()

If dev_set_name() fails in pwrseq_device_register(), we jump to the err_put_pwrseq label before initializing pwrseq->targets. pwrseq_release() will try to iterate over targets unconditionally and subsequently dereference an invalid pointer. Move the call to dev_set_name() after the list head is initialized.

Details

KernelCare state

Live-patch status from KernelCare for each operating system.

Operating system Status Covered kernels
Debian 13 Planned —
Ubuntu 26.04 Planned —