All vulnerabilities
CVE-2026-98913

Linux: net: thunderx: fix PTP device ref leak in nicvf_probe()

Linux LinuxOperating systems
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in3a2eedb172e777f2c8608395eec42250fb355daeAlso 916d74343cd60ef7c3d433bd417d26ba31642c09, 2bcf59eefb9f00a2b1d426b639ee49c305a80695 and 4 moreCVE List
Published23 Oct 2026Updated 23 Oct 2026CVE List

What fixes it

Show all 7 fixed versions

A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.

Description

In the Linux kernel, the following vulnerability has been resolved:

net: thunderx: fix PTP device ref leak in nicvf_probe()

cavium_ptp_get() acquires a reference to the PTP PCI device through pci_get_device(). If any initialization step fails after cavium_ptp_get(), the PTP PCI device reference is leaked. Add a common error path to release the PTP reference before returning from probe failures.

Text from CVE List

Affected versions 14

  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 3a2eedb172e777f2c8608395eec42250fb355daeCVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before c8bc44a1d86d5b432ec7f5a6f30b4e719a047374CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before df3d586ecc580623edadec71a6ffdf4c79e2a8e8CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 916d74343cd60ef7c3d433bd417d26ba31642c09CVE List
  • Linuxaffected: 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 before 2bcf59eefb9f00a2b1d426b639ee49c305a80695CVE List
  • Linuxaffected: all versions before 6.1.189CVE List
  • Linuxaffected: all versions before 6.6.158CVE List
  • Linuxaffected: all versions before 6.12.111CVE List
  • Linuxaffected: all versions before 6.18.53CVE List
  • Linuxunaffected: 6.1.189 through 6.1.*CVE List
  • Linuxunaffected: 6.6.158 through 6.6.*CVE List
  • Linuxunaffected: 6.12.111 through 6.12.*CVE List
  • Linuxunaffected: 6.18.53 through 6.18.*CVE List
  • Linuxunaffected: 7.2CVE List

References 5