CVE-2026-98876
In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1x_device_init(), the error teardown paths do not check client->ops before dereferencing it, unlike the forward init paths which correctly guard with 'client->ops &&'. This can result in a NULL pointer dereference if client->ops is NULL. Fix by adding the missing client->ops check in both the teardown and teardown_late labels.
Affected versions
Fixed in
5.15.222,
6.1.189,
6.6.158,
6.12.111,
6.18.53,
7.2
and their respective stable series.
References
6 totalFrequently asked questions
-
What is CVE-2026-98876?
CVE-2026-98876 is a unscored severity Linux kernel vulnerability . CVE-2026-98876 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
-
Is there a patch available for CVE-2026-98876?
Yes. CVE-2026-98876 has been patched. Fixed versions include 5.15.222, 6.1.189, 6.6.158 and others.
-
Is CVE-2026-98876 actively exploited?
No. CVE-2026-98876 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.