Null Dereference Vulnerability in Linux Kernel Affects Realtek 8821CE Chip

CVE-2026-97516

What is CVE-2026-97516?

A notable vulnerability has been identified in the Linux kernel related to the Realtek 8821CE chip. The function rtw_fw_adaptivity_result() in fw.c does not include a NULL check for the edcca_th property before dereferencing it. This oversight can lead to system instability when the edcca_th is not defined, as seen in devices equipped with the 8821CE chip. A NULL check has been introduced at the function's entry point to prevent this dereferencing error, effectively avoiding unexpected kernel crashes. Although this fix mitigates the immediate issue, a more comprehensive solution is being planned to address the root cause of this behavior.

References