CVE-2026-98411

CVE-2026-98411

published October 14, 2026

CVSS
—
EPSS
0%
Percentile
10.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()

If dev_set_name() fails in pwrseq_device_register(), we jump to the

err_put_pwrseq label before initializing pwrseq->targets.

pwrseq_release() will try to iterate over targets unconditionally and

subsequently dereference an invalid pointer. Move the call to

dev_set_name() after the list head is initialized.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00209 · 10.5th percentile
Published
2026-10-14T18:17Z
References (4)
EPSS history
Timeline
  • 16 OCT 03:33Z
    EPSS moved — → 0%
    epss
  • 14 OCT 13:27Z
    power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
    cvelistv5
  • 14 OCT 13:27Z
    power: sequencing: fix NULL-pointer dereference in pwrseq_device_register()
    cvelistv5