CVE-2026-98121

Summary

In the Linux kernel, the following vulnerability has been resolved:

watchdog: msc313e: Fix NULL pointer dereference in PM callbacks

msc313e_wdt_probe() doesn't set the driver data for the platform device. As a result, dev_get_drvdata() in msc313e_wdt_suspend() and msc313e_wdt_resume() will return NULL, leading to a NULL pointer dereference afterward.

Set the platform device driver data in msc313e_wdt_probe().

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxe9800b7994642a794afd4894f072541c14277ce8 < b02f902fe4b59d65f74a25c4523a75453bd3f808affected
LinuxLinuxe9800b7994642a794afd4894f072541c14277ce8 < 744b25040d8206f7925b8ba0be5edf93fa4bf81eaffected
LinuxLinuxe9800b7994642a794afd4894f072541c14277ce8 < 6495dc16e635356fd2b7535dcbf9b6779de4e753affected
LinuxLinuxe9800b7994642a794afd4894f072541c14277ce8 < e3eceb76515910746e6268c4e4ac1c07516ebd7baffected
LinuxLinux5.14affected
LinuxLinux0 < 5.14unaffected
LinuxLinux6.12.111 <= 6.12.*unaffected
LinuxLinux6.18.53 <= 6.18.*unaffected
LinuxLinux7.2.7 <= 7.2.*unaffected
LinuxLinux7.3-rc3 <= *unaffected

Weaknesses

References