CVE-2026-98412 is a vulnerability in Linux Kernel
Published on October 14, 2026
power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
In the Linux kernel, the following vulnerability has been resolved:
power: sequencing: fix NULL-pointer dereference in pwrseq_unit_new()
If memory allocation fails in pwrseq_unit_setup_deps(), pwrseq_unit_put()
is called to release the partially initialized unit. However, we've
never initialized unit->list and pwrseq_unit_release() will
unconditionally call list_del() on it. Initialize unit->list right after
allocating the unit struct.
Products Associated with CVE-2026-98412
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c and below 29e03670cc384561a2037c69b0a1cc5232d3c6c3 is affected.
- Version 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c and below 859880b07a75c7a29d141abfacbd750d25a8e920 is affected.
- Version 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c and below 6e571aea60de7f4c62b77510495d1bcc7df406a1 is affected.
- Version 249ebf3f65f8530beb2cbfb91bff1d83ba88d23c and below 115b303e8e093d964089ec6f3c40d984d77b33d0 is affected.
- Version 6.11 is affected.
- Before 6.11 is unaffected.
- Version 6.12.112, <= 6.12.* is unaffected.
- Version 6.18.54, <= 6.18.* is unaffected.
- Version 7.2.8, <= 7.2.* is unaffected.
- Version 7.3-rc4, <= * is unaffected.