All vulnerabilities
CVE-2026-98412

Linux: power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.21%Chance of exploitation activity in the next 30 days, higher than 10% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed in29e03670cc384561a2037c69b0a1cc5232d3c6c3Also 859880b07a75c7a29d141abfacbd750d25a8e920, 6e571aea60de7f4c62b77510495d1bcc7df406a1 and 1 moreCVE List
Published14 Oct 2026Updated 19 Oct 2026CVE List

What fixes it

  • 29e03670cc384561a2037c69b0a1cc5232d3c6c3LinuxCVE List
  • 859880b07a75c7a29d141abfacbd750d25a8e920LinuxCVE List
  • 6e571aea60de7f4c62b77510495d1bcc7df406a1LinuxCVE List
  • 115b303e8e093d964089ec6f3c40d984d77b33d0LinuxCVE List

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()

If memory allocation fails in pwrseq_unit_setup_deps(), pwrseq_unit_put() is called to release the partially initialized unit. However, we've never initialized unit->list and pwrseq_unit_release() will unconditionally call list_del() on it. Initialize unit->list right after allocating the unit struct.

Text from CVE List

Affected versions 10

  • Linuxaffected: 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c before 29e03670cc384561a2037c69b0a1cc5232d3c6c3CVE List
  • Linuxaffected: 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c before 859880b07a75c7a29d141abfacbd750d25a8e920CVE List
  • Linuxaffected: 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c before 6e571aea60de7f4c62b77510495d1bcc7df406a1CVE List
  • Linuxaffected: 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c before 115b303e8e093d964089ec6f3c40d984d77b33d0CVE List
  • Linuxaffected: 6.11CVE List
  • Linuxunaffected: all versions before 6.11CVE List
  • Linuxunaffected: 6.12.112 through 6.12.*CVE List
  • Linuxunaffected: 6.18.54 through 6.18.*CVE List
  • Linuxunaffected: 7.2.8 through 7.2.*CVE List
  • Linuxunaffected: 7.3CVE List

References 4