CVEvulnerability
CVE-2026-98411
- Status
- Received
- Published
- 2026-10-14
- Last modified
- 2026-10-19
- Assigner
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
Description
In the Linux kernel, the following vulnerability has been resolved:
power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
If dev_set_name() fails in pwrseq_device_register(), we jump to the
err_put_pwrseq label before initializing pwrseq->targets.
pwrseq_release() will try to iterate over targets unconditionally and
subsequently dereference an invalid pointer. Move the call to
dev_set_name() after the list head is initialized.
References
- https://git.kernel.org/stable/c/242da4318d97380741516b595af3920207b2f0f1 git.kernel.org
- https://git.kernel.org/stable/c/a2890c1eb96d1dd0bec1cce5fbc4ed5af1dfd55d git.kernel.org
- https://git.kernel.org/stable/c/a2fb51ec8920279e9e908010f37b448775f42eff git.kernel.org
- https://git.kernel.org/stable/c/efe21a5c5bfe23bd30a8e4ba4e2b04ae265348bb git.kernel.org