CVE-2026-98411

Source
https://cve.org/CVERecord?id=CVE-2026-98411
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98411.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-98411
Downstream
Published
2026-10-14T13:27:44Z
Modified
2026-10-16T02:48:05Z
Summary
power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
Details

In the Linux kernel, the following vulnerability has been resolved:

power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()

If dev_set_name() fails in pwrseq_device_register(), we jump to the err_put_pwrseq label before initializing pwrseq->targets. pwrseq_release() will try to iterate over targets unconditionally and subsequently dereference an invalid pointer. Move the call to dev_set_name() after the list head is initialized.

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/98xxx/CVE-2026-98411.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
249ebf3f65f8530beb2cbfb91bff1d83ba88d23c
Fixed
a2fb51ec8920279e9e908010f37b448775f42eff
Fixed
a2890c1eb96d1dd0bec1cce5fbc4ed5af1dfd55d
Fixed
efe21a5c5bfe23bd30a8e4ba4e2b04ae265348bb
Fixed
242da4318d97380741516b595af3920207b2f0f1

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98411.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.12.112
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.54
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.2.8

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-98411.json"