CVE-2026-98620

CVE-2026-98620

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure

If register_netdev() fails for one of the MTK_MAX_DEVS devices in

mtk_probe(), the error path jumps to err_deinit_ppe, skipping

mtk_unreg_dev(). The previously registered net_devices are then freed by

mtk_free_dev() while still in NETREG_REGISTERED state, hitting the

BUG_ON(dev->reg_state != NETREG_UNREGISTERED).

Route the register_netdev() failure to err_unreg_netdev so the net_devices

registered so far are properly unregistered before being freed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Published
2026-10-18T20:17Z
References (5)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:19Z
    net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure
    cvelistv5
  • 18 OCT 15:19Z
    net: ethernet: mtk_eth_soc: unregister net_devices in case of probe failure
    cvelistv5