CVE-2026-98565

CVE-2026-98565

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621

The core and io supplies are only requested for ID_MT7530: both the

devm_regulator_get() in probe and the regulator_enable() in

mt7530_setup() are guarded by the switch id, but mt7530_remove()

disables them unconditionally. On an MT7621 or an MT7531 both pointers

are still NULL from devm_kzalloc(), so rmmod or a sysfs unbind calls

regulator_disable() on NULL.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Published
2026-10-18T20:17Z
References (5)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:18Z
    net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621
    cvelistv5
  • 18 OCT 15:18Z
    net: dsa: mt7530: fix NULL dereference on unbind of MT7531 and MT7621
    cvelistv5