CVE-2026-98876

In the Linux kernel, the following vulnerability has been resolved: host1x: bus: Fix missing ops null check in error teardown In host1x_device_init(), the error teardown paths do not check client->ops before dereferencing it, unlike the forward init paths which correctly guard with 'client->ops &&'. This can result in a NULL pointer dereference if client->ops is NULL. Fix by adding the missing client->ops check in both the teardown and teardown_late labels.

Package Linux Kernel
Published 2026-10-23
Last modified 2026-10-23
Patch available
Yes

Affected versions

Fixed in 5.15.222, 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2 and their respective stable series.

Fixed in
✓ 5.15.222 5.15.x ✓ 6.1.189 6.1.x ✓ 6.6.158 6.6.x ✓ 6.12.111 6.12.x ✓ 6.18.53 6.18.x ✓ 7.2

Frequently asked questions

  • What is CVE-2026-98876?

    CVE-2026-98876 is a unscored severity Linux kernel vulnerability . CVE-2026-98876 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

  • Is there a patch available for CVE-2026-98876?

    Yes. CVE-2026-98876 has been patched. Fixed versions include 5.15.222, 6.1.189, 6.6.158 and others.

  • Is CVE-2026-98876 actively exploited?

    No. CVE-2026-98876 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.