NULL-Pointer Dereference Vulnerability in Linux Kernel Affecting Device Management

CVE-2026-98411

What is CVE-2026-98411?

A significant vulnerability has been identified in the Linux kernel's device management subsystem, specifically related to a NULL-pointer dereference during the initialization of power sequencing devices. If the device name set operation fails within the pwrseq_device_register function, the system incorrectly attempts to dereference an uninitialized pointer while iterating over device targets. This flaw potentially leads to unexpected behavior and system instability, emphasizing the importance of proper error handling in device registration processes.

References