What is CVE-2026-98913?

CVE-2026-98913 is a unscored severity Linux kernel vulnerability. CVE-2026-98913 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

What is the CVSS score for CVE-2026-98913?

CVE-2026-98913 has a CVSS score of pending NVD analysis out of 10, rated awaiting scoring severity.

Is there a patch available for CVE-2026-98913?

Yes, CVE-2026-98913 has been patched. Fixed versions include 6.1.189, 6.6.158, 6.12.111 and others.

Is CVE-2026-98913 actively exploited?

CVE-2026-98913 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.

CVE-2026-98913

In the Linux kernel, the following vulnerability has been resolved: net: thunderx: fix PTP device ref leak in nicvf_probe() cavium_ptp_get() acquires a reference to the PTP PCI device through pci_get_device(). If any initialization step fails after cavium_ptp_get(), the PTP PCI device reference is leaked. Add a common error path to release the PTP reference before returning from probe failures.

Package Linux Kernel

Published 2026-10-23

Last modified 2026-10-23

Patch available

Yes

Affected versions

Fixed in 6.1.189, 6.6.158, 6.12.111, 6.18.53, 7.2 and their respective stable series.

Fixed in

✓ 6.1.189 6.1.x ✓ 6.6.158 6.6.x ✓ 6.12.111 6.12.x ✓ 6.18.53 6.18.x ✓ 7.2

References

5 total

Frequently asked questions

What is CVE-2026-98913?

CVE-2026-98913 is a unscored severity Linux kernel vulnerability . CVE-2026-98913 has not been confirmed as actively exploited and is not listed in the CISA KEV catalog.
Is there a patch available for CVE-2026-98913?

Yes. CVE-2026-98913 has been patched. Fixed versions include 6.1.189, 6.6.158, 6.12.111 and others.
Is CVE-2026-98913 actively exploited?

No. CVE-2026-98913 has not been confirmed as actively exploited. It is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.