CVE-2026-98411
Received
Received - Intake
NULL-pointer Dereference in Linux Kernel Power Sequencing Subsystem
Vulnerability report for CVE-2026-98411, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.
Publication date: 2026-10-14
Last updated on: 2026-10-14
Assigner: kernel.org
Description
Description
In the Linux kernel, the following vulnerability has been resolved:
power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
If dev_set_name() fails in pwrseq_device_register(), we jump to the
err_put_pwrseq label before initializing pwrseq->targets.
pwrseq_release() will try to iterate over targets unconditionally and
subsequently dereference an invalid pointer. Move the call to
dev_set_name() after the list head is initialized.
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| Linux | Linux | 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c |
| Linux | Linux | 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c |
| Linux | Linux | 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c |
| Linux | Linux | 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c |
| Linux | Linux | 6.11 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |