All vulnerabilities
CVE-2026-98121

Linux: watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

Linux LinuxOperating systems
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.12%Chance of exploitation activity in the next 30 days, higher than 1% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in960251cc4a413d8f1eef2a2c6aca41073b57ce16Also 744b25040d8206f7925b8ba0be5edf93fa4bf81e, 6495dc16e635356fd2b7535dcbf9b6779de4e753CVE List
Published25 Sep 2026Updated 19 Oct 2026CVE List

What fixes it

  • 960251cc4a413d8f1eef2a2c6aca41073b57ce16LinuxCVE List
  • 744b25040d8206f7925b8ba0be5edf93fa4bf81eLinuxCVE List
  • 6495dc16e635356fd2b7535dcbf9b6779de4e753LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

msc313e_wdt_probe() doesn't set the driver data for the platform device. As a result, dev_get_drvdata() in msc313e_wdt_suspend() and msc313e_wdt_resume() will return NULL, leading to a NULL pointer dereference afterward.

Set the platform device driver data in msc313e_wdt_probe().

Text from CVE List

Affected versions 16

  • Linuxaffected: e9800b7994642a794afd4894f072541c14277ce8 before 960251cc4a413d8f1eef2a2c6aca41073b57ce16CVE List
  • Linuxaffected: e9800b7994642a794afd4894f072541c14277ce8 before afc3ea51e479289a23c642cc8bade67b94225ed9CVE List
  • Linuxaffected: e9800b7994642a794afd4894f072541c14277ce8 before a135415be56839e555e0bcdd5ffb8d2f5f947bd7CVE List
  • Linuxaffected: e9800b7994642a794afd4894f072541c14277ce8 before b02f902fe4b59d65f74a25c4523a75453bd3f808CVE List
  • Linuxaffected: e9800b7994642a794afd4894f072541c14277ce8 before 744b25040d8206f7925b8ba0be5edf93fa4bf81eCVE List
  • Linuxaffected: e9800b7994642a794afd4894f072541c14277ce8 before 6495dc16e635356fd2b7535dcbf9b6779de4e753CVE List
  • Linuxaffected: e9800b7994642a794afd4894f072541c14277ce8 before e3eceb76515910746e6268c4e4ac1c07516ebd7bCVE List
  • Linuxaffected: 5.14CVE List
  • Linuxunaffected: all versions before 5.14CVE List
  • Linuxunaffected: 5.15.222 through 5.15.*CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2.7 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 7