NULL Pointer Dereference in Linux Kernel Affects Multiple Products

CVE-2026-98129

What is CVE-2026-98129?

A memory allocation issue in the Linux kernel can cause a NULL pointer dereference leading to potential system instability. The vulnerability arises in the mpi3mr driver where a direct pass of an unchecked return value resulting from a NULL allocation to sas_port_add() can cause a dereference error. Furthermore, should the sas_port_add() function fail, the allocated sas_port structure is not released, resulting in memory leaks. It is essential to implement proper NULL checks and ensure that memory resources are freed appropriately to maintain system integrity.

References