All vulnerabilities
CVE-2026-98411

Linux: power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in242da4318d97380741516b595af3920207b2f0f1Fixed versionCVE List
Published14 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 242da4318d97380741516b595af3920207b2f0f1LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()

If dev_set_name() fails in pwrseq_device_register(), we jump to the err_put_pwrseq label before initializing pwrseq->targets. pwrseq_release() will try to iterate over targets unconditionally and subsequently dereference an invalid pointer. Move the call to dev_set_name() after the list head is initialized.

Text from CVE List

Affected versions 10

  • Linuxaffected: 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c before a2fb51ec8920279e9e908010f37b448775f42effCVE List
  • Linuxaffected: 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c before a2890c1eb96d1dd0bec1cce5fbc4ed5af1dfd55dCVE List
  • Linuxaffected: 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c before efe21a5c5bfe23bd30a8e4ba4e2b04ae265348bbCVE List
  • Linuxaffected: 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c before 242da4318d97380741516b595af3920207b2f0f1CVE List
  • Linuxaffected: 6.11CVE List
  • Linuxunaffected: all versions before 6.11CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4