CVEvulnerability
CVE-2026-98121
5.5 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2026-09-25
- Last modified
- 2026-10-22
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
- CVSS 3.1 ([email protected])
- 5.5 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-476
Description
In the Linux kernel, the following vulnerability has been resolved:
watchdog: msc313e: Fix NULL pointer dereference in PM callbacks
msc313e_wdt_probe() doesn't set the driver data for the platform device.
As a result, dev_get_drvdata() in msc313e_wdt_suspend() and
msc313e_wdt_resume() will return NULL, leading to a NULL pointer
dereference afterward.
Set the platform device driver data in msc313e_wdt_probe().
Affected configurations
• linux linux kernel (>= 5.14 < 5.15.222)
• linux linux kernel (>= 5.16 < 6.1.189)
• linux linux kernel (>= 6.2 < 6.6.158)
• linux linux kernel (>= 6.7 < 6.12.111)
• linux linux kernel (>= 6.13 < 6.18.53)
• linux linux kernel (>= 6.19 < 7.2.7)
• linux linux kernel 7.3
Related
Weakness · CWE (1)
- CWE-476 NULL Pointer Dereference weakness
References
- https://git.kernel.org/stable/c/6495dc16e635356fd2b7535dcbf9b6779de4e753 Patch
- https://git.kernel.org/stable/c/744b25040d8206f7925b8ba0be5edf93fa4bf81e Patch
- https://git.kernel.org/stable/c/960251cc4a413d8f1eef2a2c6aca41073b57ce16 Patch
- https://git.kernel.org/stable/c/a135415be56839e555e0bcdd5ffb8d2f5f947bd7 Patch
- https://git.kernel.org/stable/c/afc3ea51e479289a23c642cc8bade67b94225ed9 Patch
- https://git.kernel.org/stable/c/b02f902fe4b59d65f74a25c4523a75453bd3f808 Patch
- https://git.kernel.org/stable/c/e3eceb76515910746e6268c4e4ac1c07516ebd7b Patch