NULL-Pointer Dereference Vulnerability in Linux Kernel Power Sequencing

CVE-2026-98412

What is CVE-2026-98412?

A vulnerability has been identified in the Linux kernel related to power sequencing. When memory allocation fails in the 'pwrseq_unit_setup_deps()' function, a NULL-pointer dereference can occur during the release of a partially initialized unit. This is due to the list reference of the unit not being properly initialized before the call to 'pwrseq_unit_release()', which invokes 'list_del()' unconditionally. The issue has been addressed by ensuring the list is initialized immediately after the unit structure is allocated, preventing the potential for system crashes or unintended behavior.

References